WP
Product
Websphere Portal
126
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 34Low 1
Watch
Add Websphere Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1156 | 8.8 | May 5 | IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack Affected: 8.5; 9.0 |
| CVE-2016-2901 | 8.8 | Jun 26 | Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers… Affected: 8.5.0.0 |
| CVE-2013-2951 | 7.8 | Jul 11 | IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain… Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0; 8.0.0.1 |
| CVE-2017-1577 | 7.5 | Sep 28 | IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system Affected: 7.0.0.0; 7.0.0.1; 7.0.0.2; 8.0.0.0; 8.0.0.1; 8.5.0.0; +1 more |
| CVE-2015-7428 | 7.4 | Feb 29 | Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and… Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0 |
| CVE-2015-7472 | 7.2 | Feb 15 | IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10 allows remote attackers… Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more |
Showing 6
