{"id":"CVE-2014-6187","aliases":["EUVD-2014-6073","GHSA-8g7r-fpwr-v4xx"],"status":"published","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.","severity":{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00866,"percentile":0.58921,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2014-12-24T11:00:00Z","modified":"2026-06-17T00:12:42Z","products":[{"vendor":"ibm","product":"websphere_service_registry_and_repository"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/98553","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21693384","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/71906","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21693379","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV26727","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21693381","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21693387","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6187"},{"url":"https://github.com/advisories/GHSA-8g7r-fpwr-v4xx"}],"sources":{"cve":[{"id":"CVE-2014-6187","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2014-12-24T11:00:00Z","modified":"2024-08-06T12:10:12.606Z","updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-6073","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2014-12-24T11:00:00Z","modified":"2024-08-06T12:10:12Z","updated_at":"2026-11-03T01:57:00.015932Z"}],"ghsa":[{"id":"GHSA-8g7r-fpwr-v4xx","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2022-05-17T01:14:45Z","modified":"2023-02-03T05:03:35Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:53:23.175393Z"}],"nvd":[{"id":"CVE-2014-6187","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2014-12-24T11:59:09.9Z","modified":"2026-06-17T00:12:42.287Z","cvss":[{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:02:57.680258Z"}]}}