{"id":"CVE-2014-3056","aliases":["EUVD-2014-3077","GHSA-8953-36hj-2fm9"],"status":"published","title":"The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12...","description":"The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02072,"percentile":0.81556,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2014-07-29T20:00:00Z","modified":"2026-06-17T00:07:31Z","products":[{"vendor":"ibm","product":"websphere_portal"},{"vendor":"ibm","product":"websphere_portal_unified_task_list_portlet"}],"references":[{"url":"http://secunia.com/advisories/60499","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677032","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/93530","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3056"},{"url":"https://github.com/advisories/GHSA-8953-36hj-2fm9"}],"sources":{"cve":[{"id":"CVE-2014-3056","description":"The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.","status":"published","published":"2014-07-29T20:00:00Z","modified":"2024-08-06T10:28:46.417Z","updated_at":"2026-11-02T14:33:44.23164Z"}],"euvd":[{"id":"EUVD-2014-3077","description":"The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.","status":"published","published":"2014-07-29T20:00:00Z","modified":"2024-08-06T10:28:46Z","updated_at":"2026-11-03T01:57:12.248788Z"}],"ghsa":[{"id":"GHSA-8953-36hj-2fm9","title":"The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12...","description":"The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.","status":"published","published":"2022-05-17T01:25:53Z","modified":"2023-02-03T05:04:15Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:30.880998Z"}],"nvd":[{"id":"CVE-2014-3056","description":"The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.","status":"published","published":"2014-07-29T20:55:08.287Z","modified":"2026-06-17T00:07:31.823Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:55.19899Z"}]}}