CVE-2014-0963

The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager ...

7.1 High

The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service (infinite loop) via crafted SSL messages.

Exploit likelihood

3.08%Up 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.1

Record: CVE-2014-0963
CVSS 2.0: 7.1 HighAV:N/AC:M/Au:N/C:N/I:N/A:C
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-0963
Updated: 2026-11-02

EUVDEUVD-2014-0993 No score

Record: EUVD-2014-0993
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jw2q-j6rf-r9j2 No score

The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager ...

Record: GHSA-jw2q-j6rf-r9j2
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0963 is a high vulnerability (CVSS 7.1) in Ibm Security Access Manager For Web Appliance, published May 8, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.08%, the 87th percentile. No source names a fixed version.

References

Show 8 moreShow less