Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

126 records

Vendor: IBM Component: Websphere Portal Clear all filters
TI-2018-01486 CVE-2018-1673 · GHSA-5xf5-wg29-wv26

Cross-site scripting in IBM WebSphere Portal

Priority LOW 30

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01325 Published 2018-10-12 No fix listed CWE-79
TI-2018-01485 CVE-2018-1672 · GHSA-c3vc-j27v-38gp

Improper authentication in IBM WebSphere Portal

Priority LOW 30

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user.

CVSS 3.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01156 Published 2018-10-01 No fix listed CWE-287
TI-2018-01306 CVE-2018-1420 · GHSA-xxr9-6j7m-9mvq

Incorrect permission assignment in IBM WebSphere Portal

Priority LOW 32

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01341 Published 2018-10-01 No fix listed CWE-732
TI-2018-01603 CVE-2018-1820 · GHSA-m2xq-m4m7-r53x

Cross-site scripting in IBM WebSphere Portal

Priority LOW 26

IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00968 Published 2018-09-27 No fix listed CWE-79
TI-2018-01534 CVE-2018-1736 · GHSA-pm4w-235c-hm33

Open redirect in IBM WebSphere Portal

Priority LOW 35

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.

CVSS 3.0HIGH 7.4 Network No auth User interaction EPSS 0.01507 Published 2018-09-27 No fix listed CWE-601
TI-2018-01517 CVE-2018-1716 · GHSA-q68v-wp7g-96w4

Cross-site scripting in IBM WebSphere Portal

Priority LOW 30

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01325 Published 2018-09-27 No fix listed CWE-79
TI-2018-01474 CVE-2018-1660 · GHSA-jwhf-qmr4-x294

Cross-site scripting in IBM WebSphere Portal

Priority LOW 27

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01068 Published 2018-09-27 No fix listed CWE-79
TI-2013-02585 CVE-2013-2951 · GHSA-fpvv-wm4w-5w3x

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is…

Priority LOW 34

IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain sensitive information by reading the file…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2018-07-11 No fix listed CWE-255
TI-2018-01330 CVE-2018-1445 · GHSA-qjwv-j352-5qp2

Cross-site scripting in IBM WebSphere Portal

Priority LOW 26

IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00729 Published 2018-04-17 No fix listed CWE-79
TI-2018-01363 CVE-2018-1483 · GHSA-fjm9-4hq6-pvq8

Cross-site scripting in IBM WebSphere Portal

Priority LOW 30

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01274 Published 2018-04-11 No fix listed CWE-79
TI-2018-01329 CVE-2018-1444 · GHSA-6mfm-p2j6-g4pr

Cross-site scripting in IBM WebSphere Portal

Priority LOW 26

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00931 Published 2018-03-14 No fix listed CWE-79
TI-2018-01302 CVE-2018-1416 · GHSA-rggr-qhvv-pg4h

Cross-site scripting in IBM WebSphere Portal

Priority LOW 30

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01274 Published 2018-02-27 No fix listed CWE-79
TI-2018-01290 CVE-2018-1401 · GHSA-4m9j-jvr5-rxx6

Cross-site scripting in IBM WebSphere Portal

Priority LOW 29

IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01077 Published 2018-02-09 No fix listed CWE-79
TI-2017-01370 CVE-2017-1761 · GHSA-5cw3-4xq7-74f8

Cross-site scripting in IBM WebSphere Portal

Priority LOW 29

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00977 Published 2018-02-09 No fix listed CWE-79
TI-2018-01258 CVE-2018-1361 · GHSA-p2xr-4r4x-8m4p

Cross-site scripting in IBM WebSphere Portal

Priority LOW 29

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01077 Published 2018-01-11 No fix listed CWE-79
TI-2017-01327 CVE-2017-1698 · GHSA-mvr9-wqmg-5hv8

Information disclosure in IBM WebSphere Portal

Priority LOW 27

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01562 Published 2017-12-27 No fix listed CWE-200
TI-2017-01150 CVE-2017-1423 · GHSA-h63f-6vhg-f94h

Information disclosure in IBM WebSphere Portal

Priority LOW 27

IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01286 Published 2017-12-20 No fix listed CWE-200
TI-2017-01233 CVE-2017-1536 · GHSA-q63m-v6j4-xcwg

Cross-site scripting in IBM WebSphere Portal

Priority LOW 26

IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00694 Published 2017-12-11 No fix listed CWE-79
TI-2017-01265 CVE-2017-1577 · GHSA-4c93-8286-pv76

Path traversal in IBM WebSphere Portal

Priority LOW 38

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02898 Published 2017-09-27 No fix listed CWE-22
TI-2017-01066 CVE-2017-1303 · GHSA-5v5v-c42f-wh6w

Cross-site scripting in IBM WebSphere Portal

Priority LOW 30

IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01274 Published 2017-07-31 No fix listed CWE-79
TI-2017-00991 CVE-2017-1217 · GHSA-64fj-56vm-c8vc

Cross-site scripting in IBM WebSphere Portal

Priority LOW 29

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01077 Published 2017-07-05 No fix listed CWE-79
TI-2017-00946 CVE-2017-1156 · GHSA-v963-x7v5-m326

Open redirect in IBM WebSphere Portal

Priority MEDIUM 40

IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01146 Published 2017-05-05 No fix listed CWE-601
TI-2017-00915 CVE-2017-1120 · GHSA-8hhp-7vhr-3rr6

Cross-site scripting in IBM WebSphere Portal

Priority LOW 29

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2017-03-27 No fix listed CWE-79
TI-2016-07319 CVE-2016-8922 · GHSA-w53q-mr8f-936x

Cross-site scripting in IBM WebSphere Portal

Priority LOW 28

Exphox WebRadar is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00713 Published 2017-02-01 No fix listed CWE-79
Load more