CVE-2014-4746: IBM WebSphere Portal

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF13 and 8.5.0 through CF01 provides different error codes for firewall-traversal requests depending on whether the intranet host exists, which allows remote attackers to map the intranet network via a series of requests.

Affected products

• IBM WebSphere Portal: version 8.0.0.0 only; version 8.5.0.0 only

Published 2014-08-12. Last modified 2026-06-17.