Ibm

Websphere Portal

126 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2016-0243

  • EPSS 0.26%
  • Veröffentlicht 29.02.2016 11:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrar...

6.1

CVE-2015-7457

  • EPSS 0.19%
  • Veröffentlicht 29.02.2016 11:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

5.4

CVE-2015-7491

  • EPSS 0.13%
  • Veröffentlicht 29.02.2016 11:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

4

CVE-2015-7455

  • EPSS 0.09%
  • Veröffentlicht 29.02.2016 11:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI.

7.4

CVE-2015-7428

  • EPSS 0.2%
  • Veröffentlicht 29.02.2016 11:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

7.2

CVE-2015-7472

  • EPSS 0.22%
  • Veröffentlicht 15.02.2016 02:59:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10 allows remote attackers to conduct LDAP injection attacks, and consequently read or write to rep...

6.1

CVE-2016-0209

  • EPSS 0.23%
  • Veröffentlicht 27.01.2016 05:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5.3

CVE-2015-7447

  • EPSS 0.25%
  • Veröffentlicht 31.12.2015 05:59:27
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote attackers to bypass intended Portal AccessControl REST API access restrictions and...

4.3

CVE-2015-7413

  • EPSS 0.27%
  • Veröffentlicht 21.12.2015 11:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF19 and 8.5.0 through CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

6.8

CVE-2015-5001

  • EPSS 0.65%
  • Veröffentlicht 21.12.2015 11:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote authenticated users to cause a denial of service (memory consumption) via a crafte...