WP
Product
Websphere Portal
126
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 34Low 1
Watch
Add Websphere Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-5378 | – | Nov 13 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging… Affected: 8.0.0.0; 8.0.0.1 |
| CVE-2013-3016 | – | Aug 21 | IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a crafted request for a servlet, related to the serveServletsByClassnameEnabled… Affected: 6.1.0.0; 7.0.0.0; 7.0.0.0; 8.0; 8.0.0.0; 8.0.0.0; +4 more |
| CVE-2013-0587 | – | Aug 16 | Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving… Affected: through 8.0.0.1; 5.1.0.0; 5.1.0.1; 5.1.0.2; 5.1.0.3; 5.1.0.4; +34 more |
| CVE-2013-2950 | – | Jun 3 | CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when… Affected: 8.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; +33 more |
| CVE-2013-0549 | – | Jun 3 | Cross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +28 more |
| CVE-2012-4834 | – | Nov 30 | Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF19 and 8.0 before CF03 allows remote attackers to… Affected: 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +33 more |
| CVE-2012-2181 | – | Jul 3 | Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote attackers to read arbitrary files via a… Affected: 7.0.0.1; 7.0.0.2; 8.0 |
| CVE-2011-2754 | – | Jul 17 | Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM)… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1 |
| CVE-2011-2173 | – | May 26 | The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before CF002, allows remote authenticated users to cause a denial of service (memory… Affected: 6.0.1.7; 7.0.0.1 |
| CVE-2011-2172 | – | May 26 | Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject arbitrary web script or HTML via… Affected: 7.0.0.1; 7.0.0.1; 7.0.0.1 |
| CVE-2011-0679 | – | Jan 28 | IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows remote attackers to obtain… Affected: 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.1.4; 6.0.1.5; 6.0.1.6; +7 more |
| CVE-2010-4219 | – | Nov 9 | Cross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 6.1.0.1 |
| CVE-2010-1348 | – | Apr 12 | Unspecified vulnerability in the login process in IBM WebSphere Portal 6.0.1.1, and 6.1.0.x before 6.1.0.3 Cumulative Fix 03, has unknown impact and remote attack vectors Affected: 6.0.1.1; 6.1.0.0; 6.1.0.1; 6.1.0.2 |
| CVE-2010-0715 | – | Feb 26 | Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5,… Affected: 5.1.0.0; 5.1.0.1; 5.1.0.2; 5.1.0.3; 5.1.0.4; 5.1.0.5; +18 more |
| CVE-2010-0714 | – | Feb 26 | Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0… Affected: 5.1.0.0; 5.1.0.1; 5.1.0.2; 5.1.0.3; 5.1.0.4; 5.1.0.5; +18 more |
| CVE-2010-0704 | – | Feb 25 | Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp6015_008_01 allows remote attackers to inject arbitrary web script or HTML via… Affected: 6.0.1.5 |
| CVE-2009-4153 | – | Dec 2 | Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and attack vectors, related to the work directory Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2 |
| CVE-2009-4152 | – | Dec 2 | Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML… Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2 |
| CVE-2009-0899 | – | Jun 3 | IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1… Affected: 5.1 before 6.0.0.0 |
| CVE-2009-1010 | – | Apr 15 | Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and… Affected: 6.0.0.0; 6.0.1.0; 6.1.0.0; 6.1.5.0; 7.0.0.0; 8.0.0.0 |
| CVE-2009-1009 | – | Apr 15 | Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentiality, integrity, and availability,… Affected: 6.0.0.0; 6.0.1.0; 6.1.0.0; 6.1.5.0; 7.0.0.0; 8.0.0.0 |
| CVE-2009-1008 | – | Apr 15 | Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and… Affected: 6.0.0.0; 6.0.1.0; 6.1.0.0; 6.1.5.0; 7.0.0.0; 8.0.0.0 |
| CVE-2008-5675 | – | Dec 19 | Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "Access problems with BasicAuthTAI." Affected: through 6.0.1.4; 6.0.0.0; 6.0.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3 |
| CVE-2008-3423 | – | Aug 4 | IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors Affected: 5.1.0.0; 5.1.0.1; 5.1.0.2; 5.1.0.3; 5.1.0.4; 5.1.0.5; +5 more |
| CVE-2007-3128 | – | Jun 19 | SQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter Affected: 1.0 |
| CVE-2007-3127 | – | Jun 19 | content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote semicolon) sequence in the page… Affected: 1.0 |