Login Request a demo
WP
Product
Websphere Portal
by Ibm · last CVE Oct 12, 2018
126
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities126In the news0Timeline
Severity mix
Critical 0High 6Medium 34Low 1
Severity
All severities126Critical0High6Medium34Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Websphere Portal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-1156
8.8
1%
May 5
IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Affected: 8.5; 9.0
CVE-2016-2901
8.8
1%
Jun 26
Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers…
Affected: 8.5.0.0
CVE-2013-2951
7.8
0%
Jul 11
IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0; 8.0.0.1
CVE-2017-1577
7.5
3%
Sep 28
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0; 8.0.0.1; 8.5.0.0; +1 more
CVE-2015-7428
7.4
1%
Feb 29
Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2015-7472
7.2
2%
Feb 15
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10 allows remote attackers…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2018-1420
6.5
1%
Oct 1
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2016-5954
6.5
1%
Sep 12
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2018-1672
6.3
1%
Oct 1
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1673
6.1
1%
Oct 12
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1736
6.1
2%
Sep 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1716
6.1
1%
Sep 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1483
6.1
1%
Apr 11
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; +13 more
CVE-2018-1416
6.1
1%
Feb 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1401
6.1
1%
Feb 9
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 8.0.0.0; 8.5.0.0; 9.0.0.0
CVE-2017-1761
6.1
1%
Feb 9
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.2; 8.0.0.0; 8.0.0.1; 8.5.0.0; 9.0.0.0
CVE-2018-1361
6.1
1%
Jan 11
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5.0.0; 9.0.0.0
CVE-2017-1189
6.1
1%
Sep 7
IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2017-1303
6.1
1%
Jul 31
IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0; 8.0; 8.5; 9.0
CVE-2017-1217
6.1
1%
Jul 5
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5; 9.0
CVE-2017-1120
6.1
1%
Mar 27
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5; 9.0
CVE-2016-8922
6.1
1%
Feb 1
Exphox WebRadar is vulnerable to cross-site scripting
Affected: 8.0; 8.5
CVE-2016-0244
6.1
1%
Feb 29
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20,…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2016-0243
6.1
1%
Feb 29
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20,…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-7457
6.1
1%
Feb 29
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2016-0209
6.1
1%
Jan 27
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: 8.5.0.0
CVE-2015-4998
6.1
1%
Dec 21
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-4993
6.1
1%
Dec 21
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2018-1820
5.4
1%
Sep 27
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; +34 more
CVE-2018-1660
5.4
1%
Sep 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1445
5.4
1%
Apr 17
IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 8.0.0.0 through 8.0.0.1; 8.5; 9.0
CVE-2018-1444
5.4
1%
Mar 14
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; +13 more
CVE-2017-1536
5.4
1%
Dec 11
IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting
Affected: 7.0; 8.0; 8.5; 9.0
CVE-2016-2925
5.4
1%
Aug 8
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2016-0245
5.4
1%
Feb 29
The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2015-7491
5.4
1%
Feb 29
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote authenticated users to inject arbitrary web…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2017-1698
5.3
2%
Dec 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system
Affected: 7.0.0.0; 8.0.0.0; 8.5.0.0; 9.0.0.0
CVE-2017-1423
5.3
1%
Dec 20
IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component
Affected: 8.5.0.0; 9.0.0.0
CVE-2015-7447
5.3
2%
Dec 31
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote attackers…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-5001
4.3
2%
Dec 21
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-7455
3.1
1%
Feb 29
IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2015-7413
–
1%
Dec 21
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF19 and 8.5.0 through CF08 allows remote attackers to inject arbitrary web script or HTML…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2015-7419
–
3%
Nov 14
IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service (memory consumption) via crafted requests
Affected: 8.0.0.1; 8.0.0.1; 8.0.0.1; 8.0.0.1; 8.0.0.1; 8.0.0.1; +19 more
CVE-2015-4997
–
2%
Oct 29
IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request
Affected: 8.5.0.0
CVE-2014-8912
–
2%
Oct 28
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts…
Affected: 6.0; 6.0.0.1; 6.0.0.2; 6.0.0.3; 6.0.0.4; 6.0.1.0; +26 more
CVE-2015-1943
–
3%
Sep 14
IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-1944
–
1%
Jul 14
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote authenticated users to inject arbitrary web script…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2015-1917
–
2%
Jul 14
Cross-site scripting (XSS) vulnerability in the Active Content Filtering component in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +10 more
CVE-2015-1887
–
2%
Jul 14
IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to obtain sensitive Java Content Repository (JCR)…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2015-1921
–
2%
May 25
Open redirect vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8.5.0 before CF06 allows remote attackers to redirect users to arbitrary web sites and conduct…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
Page 1 of 3 · 126 total
123