Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm websphere portal 8.0.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2014-6193
IBM WebSphere Portal 8.0.0 up to and including 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticated users to write to pages via an XML injection attack.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.5.0.0
NA
CVE-2015-7413
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 prior to 8.0.0.1 CF19 and 8.5.0 through CF08 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 8.0.0.0
NA
CVE-2015-1944
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 prior to 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.5.0.0
NA
CVE-2015-0139
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 up to and including 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.5.0.0
NA
CVE-2015-1921
Open redirect vulnerability in IBM WebSphere Portal 8.0.0 prior to 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.5.0.0
NA
CVE-2014-6214
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 up to and including 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote malicious users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 8.0.0.1
NA
CVE-2014-0901
Cross-site scripting (XSS) vulnerability in the Social Rendering implementation in the IBM Connections integration in IBM WebSphere Portal 8.0.0.x prior to 8.0.0.1 CF11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
NA
CVE-2014-4746
IBM WebSphere Portal 8.0.0 prior to 8.0.0.1 CF13 and 8.5.0 through CF01 provides different error codes for firewall-traversal requests depending on whether the intranet host exists, which allows remote malicious users to map the intranet network via a series of requests.
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.5.0.0
NA
CVE-2014-6196
Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 up to and including 8.5.0.1, as used in WebSphere Dashboard Framework (WDF) and Lotus Widget Factory (LWF), allows remote malicious users to inject arbitrary web script or HTML by leveraging a Dojo...
Ibm Web Experience Factory 8.0
Ibm Web Experience Factory 8.5.0.1
Ibm Web Experience Factory 8.5
Ibm Web Experience Factory 7.0.1.3
Ibm Web Experience Factory 7.0.1.2
Ibm Web Experience Factory 8.0.0.3
Ibm Web Experience Factory 8.0.0
Ibm Web Experience Factory 7.0.1.1
Ibm Web Experience Factory 7.0.1
Ibm Web Experience Factory 7.0.1.4
Ibm Web Experience Factory 8.0.0.2
Ibm Web Experience Factory 8.0.0.1
Ibm Web Experience Factory 6.1.5
NA
CVE-2013-4012
IBM WebSphere Portal 8.0.0.x prior to 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or cause a denial of service vi...
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5274
CVE-2024-35388
CVE-2024-35396
elevation of privilege
CVE-2021-47544
file upload
CVE-2021-47545
memory leak
CVE-2024-4956
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4