CVE-2017-1303
- EPSS 0.28%
- Veröffentlicht 31.07.2017 21:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading t...
CVE-2017-1217
- EPSS 0.42%
- Veröffentlicht 05.07.2017 13:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...
CVE-2017-1156
- EPSS 0.68%
- Veröffentlicht 05.05.2017 19:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the U...
CVE-2017-1120
- EPSS 0.28%
- Veröffentlicht 27.03.2017 22:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...
CVE-2016-8922
- EPSS 0.24%
- Veröffentlicht 01.02.2017 20:59:02
- Zuletzt bearbeitet 20.04.2025 01:37:25
Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2016-5954
- EPSS 0.62%
- Veröffentlicht 12.09.2016 10:59:04
- Zuletzt bearbeitet 12.04.2025 10:46:40
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by uploading temporary files.
CVE-2016-2925
- EPSS 0.14%
- Veröffentlicht 08.08.2016 01:59:10
- Zuletzt bearbeitet 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated users to inject arb...
CVE-2016-2901
- EPSS 0.14%
- Veröffentlicht 26.06.2016 01:59:02
- Zuletzt bearbeitet 12.04.2025 10:46:40
Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authentication of arbitrary users for requests that insert...
CVE-2016-0245
- EPSS 0.31%
- Veröffentlicht 29.02.2016 11:59:10
- Zuletzt bearbeitet 12.04.2025 10:46:40
The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity ref...
CVE-2016-0244
- EPSS 0.19%
- Veröffentlicht 29.02.2016 11:59:09
- Zuletzt bearbeitet 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrar...