CVE-2014-6132: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WS...

Security readout for executives and security teams

CVE-2014-6132 is an authenticated cross-site scripting issue in the IBM WebSphere Service Registry and Repository Web UI. A logged-in remote user could inject script or HTML through unspecified UI input, potentially affecting other users of the application. Public sources do not provide CVSS scoring, technical vectors, or evidence of active exploitation. Exposure is limited to organizations still running affected IBM WSRR versions with accessible Web UI accounts. Risk is higher where many users share the UI, privileged administrators use it, or access is available beyond trusted networks. Treat as a cleanup and exposure-reduction item, not an emergency based on supplied evidence. Prioritize if WSRR is internet-reachable, used by privileged administrators, or still on unsupported legacy versions. Mitigation focus: Inventory IBM WSRR deployments and exact fix pack levels.; Upgrade 8.0 deployments to 8.0.0.3 or later where applicable.; Upgrade 8.5 deployments to 8.5.0.1 or later where applicable..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.