CVE-2014-6151

LOW

3.5

CVSS Severity Score

EPSS Score0.1620%

EPSS Percentile13.48th

Published2014年10月25日

Last Modified2026年5月6日

Vulnerability Description

CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected Platforms (CPE)

📦

Ibm

Tivoli Integrated Portal

= 2.1

📦

Ibm

Tivoli Integrated Portal

= 2.2

References & Advisories

🔗 http://secunia.com/advisories/61899

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1PI27417

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21687541

🔗 http://www.securityfocus.com/bid/70727

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/97033

🔗 http://secunia.com/advisories/61899

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1PI27417

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21687541

Vulnerability Description

Affected Platforms (CPE)

Tivoli Integrated Portal

Tivoli Integrated Portal

References & Advisories

相关漏洞威胁