Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
websphere portal vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2018-1820
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Fo...
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 9.0.0.0
5.4
CVSSv3
CVE-2018-1445
IBM WebSphere Portal 8.0.0 up to and including 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...
Ibm Websphere Portal
Ibm Websphere Portal 9.0
Ibm Websphere Portal 8.5
5.4
CVSSv3
CVE-2018-1444
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 9.0.0.0
5.4
CVSSv3
CVE-2017-1536
IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos...
Ibm Websphere Portal 7.0
Ibm Websphere Portal 8.5
Ibm Websphere Portal 8.0
Ibm Websphere Portal 9.0
5.4
CVSSv3
CVE-2016-2925
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x up to and including 6.1.0.6 CF27, 6.1.5.x up to and including 6.1.5.3 CF27, 7.x up to and including 7.0.0.2 CF30, 8.0.0.x up to and including 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated u...
Ibm Websphere Portal 6.1.0.3
Ibm Websphere Portal 6.1.5.0
Ibm Websphere Portal 6.1.5.3
Ibm Websphere Portal 7.0.0.2
Ibm Websphere Portal 6.1.0.1
Ibm Websphere Portal 6.1.0.2
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 7.0.0.1
Ibm Websphere Portal 6.1.0.0
Ibm Websphere Portal 6.1.5.2
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 6.1.0.6
Ibm Websphere Portal 6.1.5.1
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 7.0.0.0
Ibm Websphere Portal 6.1.0.4
Ibm Websphere Portal 6.1.0.5
5.4
CVSSv3
CVE-2016-0245
The XML parser in IBM WebSphere Portal 8.0.x prior to 8.0.0.1 CF20 and 8.5.x prior to 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity reference, related to an XML ...
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.0.0.0
5.4
CVSSv3
CVE-2015-7491
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x prior to 8.0.0.1 CF20 and 8.5.x prior to 8.5.0.0 CF09 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.0.0.0
5.3
CVSSv3
CVE-2017-1698
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390.
Ibm Websphere Portal 7.0.0.0
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 9.0.0.0
5.3
CVSSv3
CVE-2017-1423
IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 127476.
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 9.0.0.0
5.3
CVSSv3
CVE-2015-7447
IBM WebSphere Portal 6.1.0 up to and including 6.1.0.6 CF27, 6.1.5 up to and including 6.1.5.3 CF27, 7.0.0 up to and including 7.0.0.2 CF29, 8.0.0 prior to 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote malicious users to bypass intended Portal AccessControl REST API access re...
Ibm Websphere Portal 7.0.0.0
Ibm Websphere Portal 6.1.5.3
Ibm Websphere Portal 6.1.0.3
Ibm Websphere Portal 6.1.0.2
Ibm Websphere Portal 8.0.0.1
Ibm Websphere Portal 8.0.0.0
Ibm Websphere Portal 6.1.5.0
Ibm Websphere Portal 6.1.0.6
Ibm Websphere Portal 7.0.0.2
Ibm Websphere Portal 7.0.0.1
Ibm Websphere Portal 6.1.0.5
Ibm Websphere Portal 6.1.0.4
Ibm Websphere Portal 8.5.0.0
Ibm Websphere Portal 6.1.5.2
Ibm Websphere Portal 6.1.5.1
Ibm Websphere Portal 6.1.0.1
Ibm Websphere Portal 6.1.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4367
CVE-2024-35977
CVE-2023-49335
man-in-the-middle
CVE-2024-4947
CVE-2024-31714
memory leak
SQL
CVE-2024-35994
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »