IBM WebSphere Service Registry And Repository vulnerabilities

19 CVEs affecting IBM WebSphere Service Registry And Repository, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-4537, published 2020-02-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6155, published 2014-12-24. Medium severity, CVSS 4.0. EPSS: 2.4% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1…
CVE-2014-6153, published 2014-12-24. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the…
CVE-2014-6186, published 2014-12-24. Medium severity, CVSS 4.0. EPSS: 1.8% chance of exploitation in the next 30 days. IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended…
CVE-2014-6179, published 2014-12-24. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject…
CVE-2014-6177, published 2014-12-24. Medium severity, CVSS 4.0. EPSS: 1.6% chance of exploitation in the next 30 days. IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote…
CVE-2014-6181, published 2014-12-24. Medium severity, CVSS 4.0. EPSS: 1.6% chance of exploitation in the next 30 days. IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive…
CVE-2014-6132, published 2014-12-24. Low severity, CVSS 3.5. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3,…
CVE-2014-6188, published 2014-12-24. Low severity, CVSS 3.5. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2…
CVE-2014-6180, published 2014-12-24. Low severity, CVSS 3.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to…
CVE-2014-6178, published 2014-12-24. Low severity, CVSS 3.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to…

Latest

CVE-2019-4537, published 2020-02-26. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 165593.
CVE-2014-6160, published 2014-12-29. Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days. IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote…
CVE-2014-6187, published 2014-12-24. Medium severity, CVSS 6.0. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before…