Known vulnerabilities in WebSphere Portal - page 2

Vendor: IBM Corporation
Software: WebSphere Portal
Software CPE: cpe:2.3:a:ibm_corporation:websphere_portal:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Portal WebSphere Portal is affected by 103 known vulnerabilities: 34 medium, 69 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU36913 - Credentials Management
CVE-2013-2951		 CWE-255 Low
No
No
 - 11.07.2018 SB2015071414
#VU37763 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1536		 CWE-79 Low
No
No
 - 11.12.2017 SB2017032812
#VU38620 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1303		 CWE-79 Low
No
No
 - 31.07.2017 SB2017032812
#VU39354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1120		 CWE-79 Low
No
No
 - 28.03.2017 SB2017032812
#VU404 - Resource Management Errors
CVE-2016-5954		 CWE-399 Low
No
No
 - 12.09.2016 SB2016091303
#VU233 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2925		 CWE-79 Medium
No
No
 - 29.07.2016 SB2016072903
#VU40436 - Improper input validation
CVE-2016-0245		 CWE-20 Medium
No
No
 - 29.02.2016 SB2014121902
#VU40437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0244		 CWE-79 Low
No
No
 - 29.02.2016 SB2014121902
#VU40438 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0243		 CWE-79 Low
No
No
 - 29.02.2016 SB2014121902
#VU40439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-7457		 CWE-79 Low
No
No
 - 29.02.2016 SB2014121902
#VU40440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-7491		 CWE-79 Low
No
No
 - 29.02.2016 SB2014121902
#VU40441 - Permissions, Privileges, and Access Controls
CVE-2015-7455		 CWE-264 Low
No
No
 - 29.02.2016 SB2014121902
#VU40442 - Improper input validation
CVE-2015-7428		 CWE-20 Medium
No
No
 - 29.02.2016 SB2014121902
#VU40481 - Improper input validation
CVE-2015-7472		 CWE-20 Medium
No
No
 - 15.02.2016 SB2014121902
#VU40506 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0209		 CWE-79 Low
No
No
 - 27.01.2016 SB2014121902
#VU40565 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7447		 CWE-200 Medium
No
No
 - 31.12.2015 SB2014121902
#VU40570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-7413		 CWE-79 Low
No
No
 - 21.12.2015 SB2014121902
#VU40571 - Resource Management Errors
CVE-2015-5001		 CWE-399 Low
No
No
 - 21.12.2015 SB2014121902
#VU40572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-4998		 CWE-79 Low
No
No
 - 21.12.2015 SB2014121902
#VU40701 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1917		 CWE-79 Low
No
No
 - 14.07.2015 SB2015071414


Showing elements 21 - 40 out of 103