Ibm

Websphere Portal

126 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2014-0828

  • EPSS 0.26%
  • Veröffentlicht 02.04.2014 03:58:16
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the WCM (Web Content Manager) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to ...

4.3

CVE-2013-6730

  • EPSS 0.19%
  • Veröffentlicht 04.03.2014 22:55:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read re...

5.8

CVE-2013-6722

  • EPSS 0.54%
  • Veröffentlicht 14.02.2014 13:10:30
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vector...

4.9

CVE-2013-4012

  • EPSS 0.34%
  • Veröffentlicht 22.12.2013 15:16:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or ...

4.3

CVE-2013-6316

  • EPSS 0.3%
  • Veröffentlicht 22.12.2013 15:16:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM WebSphere Portal 7.0.0.x before 7.0.0.2 CF26 and 8.0.0.x before 8.0.0.1 CF09 does not properly handle content-selection changes during Taxonomy component rendering, which allows remote attackers to obtain sensitive property information in opportu...

4.3

CVE-2013-6328

  • EPSS 0.3%
  • Veröffentlicht 22.12.2013 15:16:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x before 8.0.0.1 CF09 allows remote attackers to ...

5

CVE-2013-6723

  • EPSS 0.36%
  • Veröffentlicht 22.12.2013 15:16:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always" Web Content Manager (WCM) navigator components, which allows remote attackers to obtain sensitive component information via unspecified vectors.

5

CVE-2013-6735

Exploit
  • EPSS 1.02%
  • Veröffentlicht 22.12.2013 15:16:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content...

4.3

CVE-2013-5454

  • EPSS 0.23%
  • Veröffentlicht 18.11.2013 03:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.

3.5

CVE-2013-5378

  • EPSS 0.21%
  • Veröffentlicht 13.11.2013 15:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.