{"id":"CVE-2014-0867","aliases":["EUVD-2014-0897","GHSA-3mf2-x699-cxr9"],"status":"published","title":"rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0...","description":"rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05066,"percentile":0.92375,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2014-07-07T10:00:00Z","modified":"2026-06-17T00:03:45Z","exploits":[{"source":"exploitdb","id":"EDB-33942","title":"IBM Algorithmics RICOS 4.5.0 \u003c 4.7.0 - Multiple Vulnerabilities","type":"webapps","platform":"jsp","date":"2014-07-01","url":"https://www.exploit-db.com/exploits/33942"}],"products":[{"vendor":"ibm","product":"algo_credit_limits"},{"vendor":"ibm","product":"algorithmics"}],"references":[{"url":"http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90941","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/532598/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675881","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Jun/173","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0867"},{"url":"https://github.com/advisories/GHSA-3mf2-x699-cxr9"}],"sources":{"cve":[{"id":"CVE-2014-0867","description":"rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string.","status":"published","published":"2014-07-07T10:00:00Z","modified":"2024-08-06T09:27:20.296Z","updated_at":"2026-11-02T14:33:47.741012Z"}],"euvd":[{"id":"EUVD-2014-0897","description":"rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string.","status":"published","published":"2014-07-07T10:00:00Z","modified":"2024-08-06T09:27:20Z","updated_at":"2026-11-03T01:57:19.658265Z"}],"ghsa":[{"id":"GHSA-3mf2-x699-cxr9","title":"rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0...","description":"rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string.","status":"published","published":"2022-05-14T02:53:57Z","modified":"2023-02-02T05:06:32Z","updated_at":"2026-11-02T14:52:19.633418Z"}],"nvd":[{"id":"CVE-2014-0867","description":"rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string.","status":"published","published":"2014-07-07T11:01:28.87Z","modified":"2026-06-17T00:03:45.563Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:54.827864Z"}]}}