Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm websphere portal 7.0.0.2 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2012-4834
Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote malicious users to read arbitrary files via a crafted URI.
Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 8.0.0.0
445
VMScore
CVE-2012-2181
Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote malicious users to read arbitrary files via a crafted URL.
Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 8.0
312
VMScore
CVE-2014-3102
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.0 up to and including 7.0.0.2 CF28 and 8.0.0 prior to 8.0.0.1 CF13 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.2
187
VMScore
CVE-2013-2951
IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621.
Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 8.0.0.1Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 8.0.0.0
312
VMScore
CVE-2013-5379
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x prior to 7.0.0.2 CF25 and 8.x prior to 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging improper tagging functionality.
Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 8.0.0.1
383
VMScore
CVE-2013-6316
IBM WebSphere Portal 7.0.0.x prior to 7.0.0.2 CF26 and 8.0.0.x prior to 8.0.0.1 CF09 does not properly handle content-selection changes during Taxonomy component rendering, which allows remote malicious users to obtain sensitive property information in opportunistic circumstances...
Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 8.0.0.1Ibm Websphere Portal 7.0.0.0
383
VMScore
CVE-2017-1761
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 8.0.0.1Ibm Websphere Portal 8.5.0.0Ibm Websphere Portal 9.0.0.0Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 7.0.0.0
383
VMScore
CVE-2013-0549
Cross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x up to and including 7.0.0.2 CF22 and 8.0.0.x up to and including 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote malicious u...
Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 8.0Ibm Websphere Portal 8.0.0.1
356
VMScore
CVE-2015-7455
IBM WebSphere Portal 7.x up to and including 7.0.0.2 CF29, 8.0.x prior to 8.0.0.1 CF20, and 8.5.x prior to 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI.
Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 8.0.0.1Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 8.5.0.0Ibm Websphere Portal 8.0.0.0
516
VMScore
CVE-2013-6722
Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x prior to 7.0.0.2 CF27 and 8.x up to and including 8.0.0.1 CF09 allows remote malicious users to cause a denial of service or modify data via unspecified vectors.
Ibm Websphere Portal 7.0.0.2Ibm Websphere Portal 7.0.0.1Ibm Websphere Portal 7.0.0.0Ibm Websphere Portal 8.0.0.1Ibm Websphere Portal 8.0.0.0Ibm Websphere Portal 8.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook