{"id":"CVE-2014-3055","aliases":["EUVD-2014-3076","GHSA-6p6p-w3xg-xr52"],"status":"published","title":"SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x...","description":"SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01946,"percentile":0.803,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2014-07-29T20:00:00Z","modified":"2026-06-17T00:07:31Z","products":[{"vendor":"ibm","product":"websphere_portal"},{"vendor":"ibm","product":"websphere_portal_unified_task_list_portlet"}],"references":[{"url":"http://secunia.com/advisories/60499","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677032","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/93529","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3055"},{"url":"https://github.com/advisories/GHSA-6p6p-w3xg-xr52"}],"sources":{"cve":[{"id":"CVE-2014-3055","description":"SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","status":"published","published":"2014-07-29T20:00:00Z","modified":"2024-08-06T10:28:46.297Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3076","description":"SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","status":"published","published":"2014-07-29T20:00:00Z","modified":"2024-08-06T10:28:46Z","updated_at":"2026-11-03T01:57:12.248788Z"}],"ghsa":[{"id":"GHSA-6p6p-w3xg-xr52","title":"SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x...","description":"SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","status":"published","published":"2022-05-17T01:25:54Z","modified":"2023-02-03T05:04:09Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:53:29.869331Z"}],"nvd":[{"id":"CVE-2014-3055","description":"SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","status":"published","published":"2014-07-29T20:55:08.223Z","modified":"2026-06-17T00:07:31.713Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:02:55.19899Z"}]}}