CVE-2014-6168

Status: ModifiedMedium (6)—

Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

CVSS

Version: 2.0
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Base score: 6

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.47%
Percentile among all scored CVEs: 38
Score date: 10/7/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

IBM — Security Identity Manager

CWEs

CWE-352

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2014-6168",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-12-29T02:59:02.487",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21692907",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/97752",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21692907",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/97752",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad CSRF en IBM Security Identity Manager 5.1 anterior a 5.1.0.15 IF0056 permite a usuarios remotos autenticados secuestrar la autenticación de usuarios arbitrarios para peticiones que insertan secuencias XSS."
    }
  ],
  "lastModified": "2026-06-17T00:12:40.340",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08FA266A-AB57-43CA-B0DD-56D167A7B58B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0401FB23-78F5-4846-87FC-6B82DCE0D6B8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA5FF53B-4A96-49D9-8A27-9AA29563C9D2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60933A03-C013-4B49-957F-0291B85B0112"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3342C496-2E4D-4456-819C-5B87260593ED"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A53DE24-6235-4581-A365-203036873D4A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD63BA3E-1F44-4544-9A7E-5D24D90D476C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDAD207D-34DF-4F6C-ADED-08257890507A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3467708F-A821-4148-B528-D552564D8326"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "409A6900-589C-4378-9475-B6B10D4FF1FC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D34B8A89-04F4-431C-9893-49B1191B903D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9918ADB8-2D87-4736-B5B3-6389D4A2EDD6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A7D09AD-64DA-46F3-B1BF-9D0066BE43E1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_identity_manager:5.1.0.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49268C21-2AAF-4103-AACC-FE75A234C563"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}