Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
websphere portal vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2009-4152
Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x prior to 6.1.0.3 allows remote malicious users to inject arbitrary web script or HTML via the people picker tag.
Ibm Websphere Portal 6.1.0.1
Ibm Websphere Portal 6.1.0.0
Ibm Websphere Portal 6.1.0.2
7.5
CVSSv2
CVE-2009-4153
Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x prior to 6.1.0.3 has unknown impact and attack vectors, related to the work directory.
Ibm Websphere Portal 6.1.0.1
Ibm Websphere Portal 6.1.0.0
Ibm Websphere Portal 6.1.0.2
3.5
CVSSv2
CVE-2015-0139
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 up to and including 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.5.0.0
5
CVSSv2
CVE-2012-2181
Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote malicious users to read arbitrary files via a crafted URL.
Ibm Websphere Portal 7.0.0.1
Ibm Websphere Portal 7.0.0.2
Ibm Websphere Portal 8.0
4.3
CVSSv2
CVE-2017-1217
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...
Ibm Websphere Portal 8.5
Ibm Websphere Portal 9.0
7.8
CVSSv2
CVE-2015-7419
IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote malicious users to cause a denial of service (memory consumption) via crafted requests.
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.5.0.0
3.5
CVSSv2
CVE-2018-1444
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 9.0.0.0
5
CVSSv2
CVE-2014-4746
IBM WebSphere Portal 8.0.0 prior to 8.0.0.1 CF13 and 8.5.0 through CF01 provides different error codes for firewall-traversal requests depending on whether the intranet host exists, which allows remote malicious users to map the intranet network via a series of requests.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.5.0.0
3.5
CVSSv2
CVE-2013-5378
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x prior to 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.0.0.0
4.3
CVSSv2
CVE-2014-0955
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0 prior to 8.0.0.1 CF12, when Social Rendering in Connections integration is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
spoof
CVE-2024-34928
CVE-2024-5291
deserialization
CVE-2024-4471
CVE-2024-4956
CVE-2024-32002
CVE-2024-5227
unspecified
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »