CVE-2014-0959

CVE-2014-0959 is a medium-severity vulnerability in Ibm Websphere Portal with a CVSS 2.0 base score of 4.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-20.

Key facts

Description

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect.

Frequently asked questions

What is CVE-2014-0959?
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect.
How severe is CVE-2014-0959?
CVE-2014-0959 has a CVSS 2.0 base score of 4.0, rated medium severity.
Is CVE-2014-0959 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (77th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-0959?
CVE-2014-0959 primarily affects Ibm Websphere Portal. In total, 59 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2014-0959?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2014-0959 published?
CVE-2014-0959 was published on 2014-05-22 and last updated on 2026-06-17.

References

Affected products (59)

More vulnerabilities in Ibm Websphere Portal

All CVEs affecting Ibm Websphere Portal →

Other CWE-20 (Improper Input Validation) vulnerabilities

Browse all CWE-20 (Improper Input Validation) vulnerabilities →