CVE Feed

    Dashboard / CVE / CVE-2014-9564

    CVE-2014-9564

    CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks and resulting web cache poisoning or cross-site scripting (XSS) attacks, or obtain sensitive information via multiple unspecified parameters.

    Published:Aug 25, 2017
    Last Modified:Apr 20, 2025
    EPS:Aug 25, 2017
    EPSS Score:0.00285
    CVSS Score:6.1

    Affected Products

    Vendor
    Ibm
    Product
    En6131
    Vendor
    Ibm
    Product
    En6131 Firmware
    Vendor
    Ibm
    Product
    Ib6131
    Vendor
    Ibm
    Product
    Ib6131 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-15 Command Delimiters
    CAPEC-81 Web Server Logs Tampering

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High