Ibm

Websphere Portal

126 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2011-0679

  • EPSS 2.56%
  • Published 28.01.2011 21:00:31
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows remote attackers to obtain sensitive information via a "modified message."

4.3

CVE-2010-4219

  • EPSS 0.24%
  • Published 09.11.2010 21:00:06
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party infor...

7.5

CVE-2010-1348

  • EPSS 0.67%
  • Published 12.04.2010 17:30:00
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the login process in IBM WebSphere Portal 6.0.1.1, and 6.1.0.x before 6.1.0.3 Cumulative Fix 03, has unknown impact and remote attack vectors.

4.3

CVE-2010-0714

Exploit
  • EPSS 2.77%
  • Published 26.02.2010 19:30:00
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 t...

6.8

CVE-2010-0715

Exploit
  • EPSS 0.61%
  • Published 26.02.2010 19:30:00
  • Last modified 11.04.2025 00:51:21

Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0....

4.3

CVE-2010-0704

  • EPSS 0.22%
  • Published 25.02.2010 00:30:00
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp6015_008_01 allows remote attackers to inject arbitrary web script or HTML via the search field.

4.3

CVE-2009-4152

  • EPSS 0.32%
  • Published 02.12.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.

7.5

CVE-2009-4153

  • EPSS 0.46%
  • Published 02.12.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and attack vectors, related to the work directory.

4.3

CVE-2009-0899

  • EPSS 0.34%
  • Published 03.06.2009 17:00:00
  • Last modified 09.04.2025 00:30:58

IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migratio...

4.4

CVE-2009-1008

  • EPSS 0.11%
  • Published 15.04.2009 10:30:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1010.