VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 16, 2014· Updated Jun 17, 2026

CVE-2014-6176

CVE-2014-6176

Description

IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL setting in the SCA module HTTP import binding and unconditionally select the SSLv3 protocol, which makes it easier for remote attackers to hijack sessions or obtain sensitive information by leveraging the use of a weak cipher.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • IBM/Business Process Manager13 versions
    cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*+ 12 more
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*
    • (no CPE)range: >= 7.5, <= 8.5.5
  • IBM/Websphere Enterprise Service Bus2 versions
    cpe:2.3:a:ibm:websphere_enterprise_service_bus:7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:websphere_enterprise_service_bus:7.0:*:*:*:*:*:*:*
    • (no CPE)range: = 7.0
  • IBM/Websphere Process Server2 versions
    cpe:2.3:a:ibm:websphere_process_server:7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:websphere_process_server:7.0:*:*:*:*:*:*:*
    • (no CPE)range: = 7.0

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.