Known vulnerabilities in WebSphere Portal

Vendor: IBM Corporation
Software: WebSphere Portal
Software CPE: cpe:2.3:a:ibm_corporation:websphere_portal:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Portal WebSphere Portal is affected by 103 known vulnerabilities: 34 medium, 69 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1673		 CWE-79 Low
No
No
 8.5.0.0 CF16, 9.0.0.0 CF16 10.10.2018 SB2018101013
#VU36597 - Incorrect Permission Assignment for Critical Resource
CVE-2018-1420		 CWE-732 Medium
No
No
 - 01.10.2018 SB2018022717
#VU36598 - Improper Authentication
CVE-2018-1672		 CWE-287 Medium
No
No
 - 01.10.2018 SB2018022717
#VU36611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1660		 CWE-79 Low
No
No
 - 27.09.2018 SB2018022717
#VU36612 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1716		 CWE-79 Low
No
No
 - 27.09.2018 SB2018022717
#VU36613 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-1736		 CWE-601 Low
No
No
 - 27.09.2018 SB2018022717
#VU36614 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1820		 CWE-79 Low
No
No
 - 27.09.2018 SB2018022717
#VU11751 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1445		 CWE-79 Low
No
No
 - 10.04.2018 SB2018041101
#VU11617 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1483		 CWE-79 Low
No
No
 - 07.04.2018 SB2018040805
#VU10890 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1444		 CWE-79 Low
No
No
 - 09.03.2018 SB2018030906
SB20240827138
#VU37483 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1416		 CWE-79 Low
No
No
 - 27.02.2018 SB2018022717
#VU10392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1761		 CWE-79 Low
No
No
 - 07.02.2018 SB2018020702
#VU10388 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1401		 CWE-79 Low
No
No
 - 06.02.2018 SB2018020702
#VU9923 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1361		 CWE-79 Low
No
No
 - 09.01.2018 SB2018011008
#VU9735 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1698		 CWE-200 Low
No
No
 - 22.12.2017 SB2017122101
#VU9681 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1423		 CWE-200 Low
No
No
 - 16.12.2017 SB2017121506
#VU8566 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-1577		 CWE-22 Medium
No
No
 - 21.09.2017 SB2017092119
#VU8138 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1189		 CWE-79 Low
No
No
 - 06.09.2017 SB2017090701
#VU7232 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1217		 CWE-79 Low
No
No
 - 29.06.2017 SB2017062903
#VU6422 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-1156		 CWE-601 Medium
No
No
 - 05.05.2017 SB2017050503


Showing elements 1 - 20 out of 103