Login Request a demo
WP
Product
Websphere Portal
by Ibm · last CVE Oct 12, 2018
126
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities126In the news0Timeline
Severity mix
Critical 0High 6Medium 34Low 1
Severity
All severities126Critical0High6Medium34Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Websphere Portal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1420
6.5
1%
Oct 1
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2016-5954
6.5
1%
Sep 12
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2018-1672
6.3
1%
Oct 1
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a…
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1673
6.1
1%
Oct 12
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1736
6.1
2%
Sep 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1716
6.1
1%
Sep 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1483
6.1
1%
Apr 11
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; +13 more
CVE-2018-1416
6.1
1%
Feb 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1401
6.1
1%
Feb 9
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 8.0.0.0; 8.5.0.0; 9.0.0.0
CVE-2017-1761
6.1
1%
Feb 9
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.2; 8.0.0.0; 8.0.0.1; 8.5.0.0; 9.0.0.0
CVE-2018-1361
6.1
1%
Jan 11
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5.0.0; 9.0.0.0
CVE-2017-1189
6.1
1%
Sep 7
IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more
CVE-2017-1303
6.1
1%
Jul 31
IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0; 8.0; 8.5; 9.0
CVE-2017-1217
6.1
1%
Jul 5
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5; 9.0
CVE-2017-1120
6.1
1%
Mar 27
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5; 9.0
CVE-2016-8922
6.1
1%
Feb 1
Exphox WebRadar is vulnerable to cross-site scripting
Affected: 8.0; 8.5
CVE-2016-0244
6.1
1%
Feb 29
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20,…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2016-0243
6.1
1%
Feb 29
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20,…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-7457
6.1
1%
Feb 29
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2016-0209
6.1
1%
Jan 27
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: 8.5.0.0
CVE-2015-4998
6.1
1%
Dec 21
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-4993
6.1
1%
Dec 21
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2018-1820
5.4
1%
Sep 27
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; 8.0.0.0; +34 more
CVE-2018-1660
5.4
1%
Sep 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 7.0.0.0; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; 7.0.0.1; +34 more
CVE-2018-1445
5.4
1%
Apr 17
IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting
Affected: 8.0.0.0 through 8.0.0.1; 8.5; 9.0
CVE-2018-1444
5.4
1%
Mar 14
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting
Affected: 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; 8.5.0.0; +13 more
CVE-2017-1536
5.4
1%
Dec 11
IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting
Affected: 7.0; 8.0; 8.5; 9.0
CVE-2016-2925
5.4
1%
Aug 8
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2016-0245
5.4
1%
Feb 29
The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2015-7491
5.4
1%
Feb 29
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote authenticated users to inject arbitrary web…
Affected: 8.0.0.0; 8.0.0.1; 8.5.0.0
CVE-2017-1698
5.3
2%
Dec 27
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system
Affected: 7.0.0.0; 8.0.0.0; 8.5.0.0; 9.0.0.0
CVE-2017-1423
5.3
1%
Dec 20
IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component
Affected: 8.5.0.0; 9.0.0.0
CVE-2015-7447
5.3
2%
Dec 31
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote attackers…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
CVE-2015-5001
4.3
2%
Dec 21
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote…
Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +11 more
Showing 34