# CVEs published 2014-10-28 9 CVEs were published on October 28, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2014-3293](https://cve.now/CVE-2014-3293.md): Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to (no CVSS) - [CVE-2014-4808](https://cve.now/CVE-2014-4808.md): Unspecified vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 thro (no CVSS) - [CVE-2014-4814](https://cve.now/CVE-2014-4814.md): IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 b (no CVSS) - [CVE-2014-4821](https://cve.now/CVE-2014-4821.md): IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 b (no CVSS) - [CVE-2014-6125](https://cve.now/CVE-2014-6125.md): Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authenticati (no CVSS) - [CVE-2014-6126](https://cve.now/CVE-2014-6126.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2014-4023](https://cve.now/CVE-2014-4023.md): Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link C (no CVSS) - [CVE-2014-8505](https://cve.now/CVE-2014-8505.md): Multiple cross-site scripting (XSS) vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the (1) p (no CVSS) - [CVE-2014-8506](https://cve.now/CVE-2014-8506.md): Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the (1) page\_id parameter t (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-10-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.