Login Request a demo
WP
Product
Websphere Portal
by Ibm · last CVE Oct 12, 2018
126
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities126In the news0Timeline
Severity mix
Critical 0High 6Medium 34Low 1
Severity
All severities126Critical0High6Medium34Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Websphere Portal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-1899
–
2%
May 25
IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors
Affected: 8.5.0.0
CVE-2015-1908
–
2%
Apr 27
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-1886
–
3%
Apr 27
The Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16,…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-0177
–
1%
Mar 13
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL
Affected: 8.5.0.0
CVE-2015-0139
–
1%
Mar 13
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2014-6214
–
1%
Mar 13
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote attackers to hijack the authentication of…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2014-8909
–
1%
Feb 13
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF29, 8.0.0.x before 8.0.0.1…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +8 more
CVE-2014-8902
–
2%
Dec 19
Cross-site scripting (XSS) vulnerability in the Blog Portlet in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2014-6193
–
2%
Dec 19
IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticated users to write to pages via an XML…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2014-6171
–
2%
Dec 19
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14,…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2014-6215
–
1%
Dec 11
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and…
Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +9 more
CVE-2014-6093
–
2%
Nov 26
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x through 8.0.0.1 CF14, and 8.5.x before 8.5.0 CF02 allows remote authenticated…
Affected: through 7.0.0.2; through 8.0.0.1; through 8.5.0.0; 7.0.0.0; 7.0.0.1; 8.0.0.0
CVE-2014-6126
–
2%
Oct 28
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: 8.5.0.0
CVE-2014-6125
–
1%
Oct 28
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authentication of arbitrary users for requests that…
Affected: 8.5.0.0
CVE-2014-4821
–
2%
Oct 28
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 provides different…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2014-4814
–
2%
Oct 28
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 does not properly detect…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2014-4808
–
3%
Oct 28
Unspecified vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +10 more
CVE-2014-4761
–
2%
Oct 10
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 before 8.0.0.1 CF14, and 8.5.0 through 8.5.0.0 CF02 allows remote…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-4792
–
2%
Sep 12
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote…
Affected: 6.0.0.0; 6.0.0.1; 6.0.1.6; 6.1.0.0; 6.1.0.1; 6.1.0.2; +34 more
CVE-2014-4762
–
1%
Sep 12
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8.5.0 before CF02 allows remote authenticated users to inject arbitrary web script…
Affected: 8.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; +12 more
CVE-2014-4760
–
2%
Aug 12
Open redirect vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 before 8.0.0.1 CF13, and 8.5.0…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +10 more
CVE-2014-4746
–
2%
Aug 12
IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF13 and 8.5.0 through CF01 provides different error codes for firewall-traversal requests depending on whether the intranet host exists,…
Affected: 8.0.0.0; 8.5.0.0
CVE-2014-3102
–
1%
Aug 12
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF28 and 8.0.0 before 8.0.0.1 CF13 allows remote authenticated users to inject arbitrary web…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0
CVE-2014-0953
–
2%
Aug 12
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, and 8.0.0 before 8.0.0.1…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +9 more
CVE-2014-3057
–
2%
Jul 29
Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2014-3056
–
2%
Jul 29
The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2014-3055
–
2%
Jul 29
SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2014-3054
–
2%
Jul 29
Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2014-0910
–
3%
Jun 18
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, and 7.0.0 through 7.0.0.2 CF28 allows remote…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 6.1.5.0; 6.1.5.1; 6.1.5.2; +8 more
CVE-2014-0959
–
2%
May 22
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-0958
–
2%
May 22
Open redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-0956
–
1%
May 22
Cross-site scripting (XSS) vulnerability in googlemap.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-0955
–
2%
May 22
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0 before 8.0.0.1 CF12, when Social Rendering in Connections integration is enabled, allows remote authenticated…
Affected: 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; +8 more
CVE-2014-0954
–
1%
May 22
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 does not validate JSP includes, which allows…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-0952
–
1%
May 22
Cross-site scripting (XSS) vulnerability in boot_config.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF28, 7.0 through 7.0.0.2 CF28, and 8.0…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-0951
–
1%
May 22
Cross-site scripting (XSS) vulnerability in FilterForm.jsp in IBM WebSphere Portal 7.0 before 7.0.0.2 CF28 and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary…
Affected: 6.1.0.6; 6.1.5.3; 7.0.0.0; 7.0.0.0; 7.0.0.1; 7.0.0.1; +34 more
CVE-2014-0949
–
1%
May 22
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to cause a denial of…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-0918
–
2%
May 16
Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-0917
–
1%
May 16
Cross-site scripting (XSS) vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2014-0901
–
1%
Apr 2
Cross-site scripting (XSS) vulnerability in the Social Rendering implementation in the IBM Connections integration in IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF11 allows…
Affected: 8.0.0.0; 8.0.0.1
CVE-2014-0828
–
1%
Apr 2
Cross-site scripting (XSS) vulnerability in the WCM (Web Content Manager) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +10 more
CVE-2013-6730
–
2%
Mar 4
IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +10 more
CVE-2013-6722
–
1%
Feb 14
Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote…
Affected: 7.0.0.0; 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2013-6735
–
4%
Dec 22
IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x…
Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +20 more
CVE-2013-6723
–
2%
Dec 22
IBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always" Web Content Manager (WCM) navigator components, which allows remote attackers to…
Affected: 8.0.0.1
CVE-2013-6328
–
1%
Dec 22
Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +10 more
CVE-2013-6316
–
1%
Dec 22
IBM WebSphere Portal 7.0.0.x before 7.0.0.2 CF26 and 8.0.0.x before 8.0.0.1 CF09 does not properly handle content-selection changes during Taxonomy component rendering, which…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0; 8.0.0.1
CVE-2013-4012
–
1%
Dec 22
IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file…
Affected: 8.0.0.0; 8.0.0.1
CVE-2013-5454
–
2%
Nov 18
IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to…
Affected: 6.0.0.0; 6.0.0.1; 6.0.1.0; 6.0.1.1; 6.0.1.2; 6.0.1.3; +20 more
CVE-2013-5379
–
1%
Nov 13
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0; 8.0.0.1
Page 2 of 3 · 126 total
123