{"id":"CVE-2014-8887","aliases":["EUVD-2014-8714","GHSA-4grj-7gv3-r7f2"],"status":"published","title":"IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4...","description":"IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01086,"percentile":0.65484,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2015-06-07T18:00:00Z","modified":"2026-06-17T00:17:29Z","products":[{"vendor":"ibm","product":"marketing_operations"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21902933","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8887"},{"url":"https://github.com/advisories/GHSA-4grj-7gv3-r7f2"}],"sources":{"cve":[{"id":"CVE-2014-8887","description":"IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.","status":"published","published":"2015-06-07T18:00:00Z","modified":"2024-08-06T13:33:11.945Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-8714","description":"IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.","status":"published","published":"2015-06-07T18:00:00Z","modified":"2024-08-06T13:33:11Z","updated_at":"2026-11-03T01:56:50.592563Z"}],"ghsa":[{"id":"GHSA-4grj-7gv3-r7f2","title":"IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4...","description":"IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.","status":"published","published":"2022-05-17T04:12:46Z","modified":"2023-01-28T05:01:21Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:43:32.807122Z"}],"nvd":[{"id":"CVE-2014-8887","description":"IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.","status":"published","published":"2015-06-07T18:59:02.47Z","modified":"2026-06-17T00:17:29Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:58.385843Z"}]}}