# CVEs published 2014-05-01

12 CVEs were published on May 1, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6323](https://cve.now/CVE-2013-6323.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x be (no CVSS)
- [CVE-2014-0646](https://cve.now/CVE-2014-0646.md): The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6. (no CVSS)
- [CVE-2014-0823](https://cve.now/CVE-2014-0823.md): IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a cra (no CVSS)
- [CVE-2014-0857](https://cve.now/CVE-2014-0857.md): The Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated (no CVSS)
- [CVE-2014-0859](https://cve.now/CVE-2014-0859.md): The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST (no CVSS)
- [CVE-2014-0896](https://cve.now/CVE-2014-0896.md): IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information via a cr (no CVSS)
- [CVE-2014-0941](https://cve.now/CVE-2014-0941.md): Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows (no CVSS)
- [CVE-2014-0942](https://cve.now/CVE-2014-0942.md): Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows (no CVSS)
- [CVE-2013-7374](https://cve.now/CVE-2013-7374.md): The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly res (no CVSS)
- [CVE-2014-2881](https://cve.now/CVE-2014-2881.md): Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Applicati (no CVSS)
- [CVE-2014-2882](https://cve.now/CVE-2014-2882.md): Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-6 (no CVSS)
- [CVE-2014-0786](https://cve.now/CVE-2014-0786.md): Ecava IntegraXor Information Exposure (no CVSS, Ecava IntegraXor)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-05-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.