Ibm

Websphere Portal

126 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2014-0828

  • EPSS 0.26%
  • Published 02.04.2014 03:58:16
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the WCM (Web Content Manager) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to ...

4.3

CVE-2013-6730

  • EPSS 0.19%
  • Published 04.03.2014 22:55:03
  • Last modified 12.04.2025 10:46:40

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read re...

5.8

CVE-2013-6722

  • EPSS 0.54%
  • Published 14.02.2014 13:10:30
  • Last modified 11.04.2025 00:51:21

Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vector...

4.9

CVE-2013-4012

  • EPSS 0.34%
  • Published 22.12.2013 15:16:04
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or ...

4.3

CVE-2013-6316

  • EPSS 0.3%
  • Published 22.12.2013 15:16:04
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Portal 7.0.0.x before 7.0.0.2 CF26 and 8.0.0.x before 8.0.0.1 CF09 does not properly handle content-selection changes during Taxonomy component rendering, which allows remote attackers to obtain sensitive property information in opportu...

4.3

CVE-2013-6328

  • EPSS 0.3%
  • Published 22.12.2013 15:16:04
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x before 8.0.0.1 CF09 allows remote attackers to ...

5

CVE-2013-6723

  • EPSS 0.36%
  • Published 22.12.2013 15:16:04
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always" Web Content Manager (WCM) navigator components, which allows remote attackers to obtain sensitive component information via unspecified vectors.

5

CVE-2013-6735

Exploit
  • EPSS 1.02%
  • Published 22.12.2013 15:16:04
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content...

4.3

CVE-2013-5454

  • EPSS 0.23%
  • Published 18.11.2013 03:55:06
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.

3.5

CVE-2013-5378

  • EPSS 0.21%
  • Published 13.11.2013 15:55:03
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.