Show filters
127 Total Results
Displaying 11-20 of 127
Sort by:
Attacker Value
Unknown
CVE-2018-1444
Disclosure Date: March 14, 2018 (last updated November 26, 2024)
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139906.
0
Attacker Value
Unknown
CVE-2018-1416
Disclosure Date: February 27, 2018 (last updated November 26, 2024)
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138822.
0
Attacker Value
Unknown
CVE-2018-1401
Disclosure Date: February 09, 2018 (last updated November 26, 2024)
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138437.
0
Attacker Value
Unknown
CVE-2017-1761
Disclosure Date: February 09, 2018 (last updated November 26, 2024)
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136005.
0
Attacker Value
Unknown
CVE-2018-1361
Disclosure Date: January 11, 2018 (last updated November 26, 2024)
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137158.
0
Attacker Value
Unknown
CVE-2017-1698
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390.
0
Attacker Value
Unknown
CVE-2017-1423
Disclosure Date: December 20, 2017 (last updated November 26, 2024)
IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 127476.
0
Attacker Value
Unknown
CVE-2017-1536
Disclosure Date: December 11, 2017 (last updated November 26, 2024)
IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130733.
0
Attacker Value
Unknown
CVE-2017-1577
Disclosure Date: September 28, 2017 (last updated November 26, 2024)
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 132117.
0
Attacker Value
Unknown
CVE-2017-1189
Disclosure Date: September 07, 2017 (last updated November 26, 2024)
IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558.
0
