Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2017-1761
Disclosure Date: February 09, 2018 (last updated November 26, 2024)
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136005.
0
Attacker Value
Unknown
CVE-2018-1361
Disclosure Date: January 11, 2018 (last updated November 26, 2024)
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137158.
0
Attacker Value
Unknown
CVE-2017-1698
Disclosure Date: December 27, 2017 (last updated November 26, 2024)
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390.
0
Attacker Value
Unknown
CVE-2017-1423
Disclosure Date: December 20, 2017 (last updated November 26, 2024)
IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 127476.
0
Attacker Value
Unknown
CVE-2017-1577
Disclosure Date: September 28, 2017 (last updated November 26, 2024)
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 132117.
0
