Ibm

Websphere Portal

126 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2017-1303

  • EPSS 0.28%
  • Published 31.07.2017 21:29:00
  • Last modified 20.04.2025 01:37:25

IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading t...

6.1

CVE-2017-1217

  • EPSS 0.42%
  • Published 05.07.2017 13:29:00
  • Last modified 20.04.2025 01:37:25

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...

8.8

CVE-2017-1156

  • EPSS 0.68%
  • Published 05.05.2017 19:29:00
  • Last modified 20.04.2025 01:37:25

IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the U...

6.1

CVE-2017-1120

  • EPSS 0.28%
  • Published 27.03.2017 22:59:00
  • Last modified 20.04.2025 01:37:25

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...

6.1

CVE-2016-8922

  • EPSS 0.24%
  • Published 01.02.2017 20:59:02
  • Last modified 20.04.2025 01:37:25

Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

6.5

CVE-2016-5954

  • EPSS 0.62%
  • Published 12.09.2016 10:59:04
  • Last modified 12.04.2025 10:46:40

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by uploading temporary files.

5.4

CVE-2016-2925

  • EPSS 0.14%
  • Published 08.08.2016 01:59:10
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated users to inject arb...

8.8

CVE-2016-2901

  • EPSS 0.14%
  • Published 26.06.2016 01:59:02
  • Last modified 12.04.2025 10:46:40

Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authentication of arbitrary users for requests that insert...

5.5

CVE-2016-0245

  • EPSS 0.31%
  • Published 29.02.2016 11:59:10
  • Last modified 12.04.2025 10:46:40

The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity ref...

6.1

CVE-2016-0244

  • EPSS 0.19%
  • Published 29.02.2016 11:59:09
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrar...