Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm websphere portal 6.1.0.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2009-4153
Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x prior to 6.1.0.3 has unknown impact and attack vectors, related to the work directory.
Ibm Websphere Portal 6.1.0.1Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 6.1.0.2
4.3
CVSSv2
CVE-2009-4152
Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x prior to 6.1.0.3 allows remote malicious users to inject arbitrary web script or HTML via the people picker tag.
Ibm Websphere Portal 6.1.0.1Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 6.1.0.2
5
CVSSv2
CVE-2013-3016
IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote malicious users to access the user directory via a crafted request for a servlet, related to the serveServletsByClassnameEnabled setting.
Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 8.0
7.5
CVSSv2
CVE-2010-1348
Unspecified vulnerability in the login process in IBM WebSphere Portal 6.0.1.1, and 6.1.0.x prior to 6.1.0.3 Cumulative Fix 03, has unknown impact and remote attack vectors.
Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 6.1.0.1Ibm Websphere Portal 6.0.1.1Ibm Websphere Portal 6.1.0.2
4.4
CVSSv2
CVE-2009-1009
Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentiality, integrity, and availability, related to HTML.
Oracle Application Server 8.1.9Ibm Websphere Portal 6.0.0.0Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 6.1.5.0Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 6.0.1.0
3.5
CVSSv2
CVE-2013-2950
CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x prior to 6.1.0.3 CF26, 6.1.5.x prior to 6.1.5 CF26, 7.0.0.x prior to 7.0.0.2 CF21, and 8.0.0.x up to and including 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated ...
Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 8.0Ibm Websphere Portal 8.0.0.1Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 6.1.0.3Ibm Websphere Portal 6.1.5.0Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 6.1.0.1Ibm Websphere Portal 6.1.0.2
7.5
CVSSv2
CVE-2008-3423
IBM WebSphere Portal 5.1 up to and including 6.1.0.0 allows remote malicious users to bypass authentication and obtain administrative access via unspecified vectors.
Ibm Websphere Portal 5.1.0.1Ibm Websphere Portal 5.1.0.2Ibm Websphere Portal 6.0.1.3Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 5.1.0.0Ibm Websphere Portal 6.0.0.1Ibm Websphere Portal 6.0.1.1Ibm Websphere Portal 5.1.0.5Ibm Websphere Portal 6.0.0.0Ibm Websphere Portal 5.1.0.3Ibm Websphere Portal 5.1.0.4
5
CVSSv2
CVE-2011-0679
IBM WebSphere Portal 6.0.1.1 up to and including 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows remote malicious users to obtain sensitive information via a "modified message."
Ibm Websphere Portal 6.0.1.4Ibm Websphere Portal 6.0.1.5Ibm Websphere Portal 6.1.5.0Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 6.0.1.6Ibm Websphere Portal 6.0.1.7Ibm Websphere Portal 6.0.1.1Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 6.1.0.1Ibm Websphere Portal 6.0.1.2Ibm Websphere Portal 6.0.1.3Ibm Websphere Portal 6.1.0.2Ibm Websphere Portal 6.1.0.3
4.4
CVSSv2
CVE-2009-1008
Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1010.
Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 6.0.0.0Ibm Websphere Portal 6.0.1.0Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 6.1.5.0Ibm Websphere Portal 8.0.0.0Oracle Application Server 8.3.0Oracle Application Server 8.2.2
4.4
CVSSv2
CVE-2009-1010
Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008.
Ibm Websphere Portal 6.0.0.0Ibm Websphere Portal 6.0.1.0Ibm Websphere Portal 6.1.5.0Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 6.1.0.0Ibm Websphere Portal 7.0.0.0Oracle Application Server 8.2.2Oracle Application Server 8.3.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook