Ibm Websphere Portal vulnerabilities
126 known vulnerabilities affecting ibm/websphere_portal.
Total CVEs
126
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH15MEDIUM95LOW15
Vulnerabilities
Page 6 of 7
CVE-2013-0587P4MEDIUMCVSS 4.3≤ 8.0.0.1v5.1.0.0+29 more2013-08-16
CVE-2013-0587 [MEDIUM] CWE-79 CVE-2013-0587: Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allo
Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Portal, (2) Portal 7.0.0.2, (3) Portal 8.0, or (4) PortalWeb2 theme.
nvd
CVE-2014-4792P4MEDIUMCVSS 4.0v6.0.0.0v6.0.0.1+19 more2014-09-12
CVE-2014-4792 [MEDIUM] CWE-399 CVE-2014-4792: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 C
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote authenticated users to cause a denial of service (disk consumption) by uploading large files.
nvd
CVE-2011-2754P4MEDIUMCVSS 4.3v7.0.0.0v7.0.0.12011-07-17
CVE-2011-2754 [MEDIUM] CWE-79 CVE-2011-2754: Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphe
Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2013-2950P4LOWCVSS 3.5v8.0v8.0.0.0+9 more2013-06-03
CVE-2013-2950 [LOW] CWE-94 CVE-2013-2950: CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1
CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecif
nvd
CVE-2011-2172P4MEDIUMCVSS 4.3v7.0.0.12011-05-26
CVE-2011-2172 [MEDIUM] CWE-79 CVE-2011-2172: Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before
Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2014-0959P4MEDIUMCVSS 4.0v6.1.0.0v6.1.0.1+14 more2014-05-22
CVE-2014-0959 [MEDIUM] CWE-20 CVE-2014-0959: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF2
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect.
nvd
CVE-2009-4152P4MEDIUMCVSS 4.3v6.1.0.0v6.1.0.1+1 more2009-12-02
CVE-2009-4152 [MEDIUM] CWE-79 CVE-2009-4152: Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.
Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.
nvd
CVE-2010-0704P4MEDIUMCVSS 4.3v6.0.1.52010-02-25
CVE-2010-0704 [MEDIUM] CWE-79 CVE-2010-0704: Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp60
Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp6015_008_01 allows remote attackers to inject arbitrary web script or HTML via the search field.
nvd
CVE-2014-4814P4LOWCVSS 3.5v6.1.0.0v6.1.0.1+15 more2014-10-28
CVE-2014-4814 [LOW] CVE-2014-4814: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF2
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 does not properly detect recursion during entity expansion, which allows remote authenticated users to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of
nvd
CVE-2010-4219P4MEDIUMCVSS 4.3v6.1.0.12010-11-09
CVE-2010-4219 [MEDIUM] CWE-79 CVE-2010-4219: Cross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1 al
Cross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.
nvd
CVE-2014-6093P4LOWCVSS 3.5≤ 7.0.0.2≤ 8.0.0.1+4 more2014-11-26
CVE-2014-6093 [LOW] CWE-79 CVE-2014-6093: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x th
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x through 8.0.0.1 CF14, and 8.5.x before 8.5.0 CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2014-8909P4LOWCVSS 3.5v6.1.0.0v6.1.0.1+12 more2015-02-13
CVE-2014-8909 [LOW] CWE-79 CVE-2014-8909: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF29, 8.0.0.x before 8.0.0.1 CF15, and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2014-6215P4LOWCVSS 3.5v6.1.0v6.1.0.1+11 more2014-12-11
CVE-2014-6215 [LOW] CWE-79 CVE-2014-6215: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 t
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2015-1944P4LOWCVSS 3.5v8.0.0.0v8.0.0.1+1 more2015-07-14
CVE-2015-1944 [LOW] CWE-79 CVE-2015-1944: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2014-4762P4LOWCVSS 3.5v8.0v8.0.0.0+2 more2014-09-12
CVE-2014-4762 [LOW] CWE-79 CVE-2014-4762: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8.5.
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8.5.0 before CF02 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2014-3102P4LOWCVSS 3.5v7.0.0.0v7.0.0.1+2 more2014-08-12
CVE-2014-3102 [LOW] CWE-79 CVE-2014-3102: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF28 and 8.0.
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF28 and 8.0.0 before 8.0.0.1 CF13 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2015-0177P4LOWCVSS 3.5v8.5.0.02015-03-13
CVE-2015-0177 [LOW] CWE-79 CVE-2015-0177: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote aut
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2015-0139P4LOWCVSS 3.5v8.0.0.0v8.0.0.1+1 more2015-03-13
CVE-2015-0139 [LOW] CWE-79 CVE-2015-0139: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2013-5378P4LOWCVSS 3.5v8.0.0.0v8.0.0.12013-11-13
CVE-2013-5378 [LOW] CWE-79 CVE-2013-5378: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remot
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.
nvd
CVE-2009-1010P4MEDIUMCVSS 4.4v6.0.0.0v6.0.1.0+4 more2009-04-15
CVE-2009-1010 [MEDIUM] CVE-2009-1010: Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2
Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008.
nvd