Known vulnerabilities in WebSphere Portal - page 3

Vendor: IBM Corporation
Software: WebSphere Portal
Software CPE: cpe:2.3:a:ibm_corporation:websphere_portal:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Portal WebSphere Portal is affected by 103 known vulnerabilities: 34 medium, 69 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU40573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-4993		 CWE-79 Low
No
No
 - 21.12.2015 SB2014121902
#VU40598 - Resource Management Errors
CVE-2015-7419		 CWE-399 Medium
No
No
 - 14.11.2015 SB2014121902
#VU40623 - Permissions, Privileges, and Access Controls
CVE-2015-4997		 CWE-264 Medium
No
No
 - 29.10.2015 SB2014121902
#VU40624 - Improper Access Control
CVE-2014-8912		 CWE-284 Medium
No
No
 - 28.10.2015 SB2014121902
#VU40650 - Resource Management Errors
CVE-2015-1943		 CWE-399 Medium
No
No
 - 15.09.2015 SB2014121902
#VU40699 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1944		 CWE-79 Low
No
No
 - 14.07.2015 SB2014121902
#VU40700 - Exposure of sensitive information to an unauthorized actor
CVE-2015-1887		 CWE-200 Medium
No
No
 - 14.07.2015 SB2014121902
#VU40770 - Improper input validation
CVE-2015-1921		 CWE-20 Medium
No
No
 - 25.05.2015 SB2014121902
#VU40771 - Resource Management Errors
CVE-2015-1899		 CWE-399 Medium
No
No
 - 25.05.2015 SB2014121902
#VU40806 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1908		 CWE-79 Low
No
No
 - 27.04.2015 SB2014121902
#VU40807 - Resource Management Errors
CVE-2015-1886		 CWE-399 Medium
No
No
 - 27.04.2015 SB2014121902
#VU40872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-0177		 CWE-79 Low
No
No
 - 13.03.2015 SB2014121902
#VU40873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-0139		 CWE-79 Low
No
No
 - 13.03.2015 SB2014121902
#VU40874 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6214		 CWE-79 Low
No
No
 - 13.03.2015 SB2014121902
#VU40894 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8909		 CWE-79 Low
No
No
 - 13.02.2015 SB2014112605
#VU41001 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8902		 CWE-79 Low
No
No
 - 19.12.2014 SB2014121902
#VU41002 - Improper input validation
CVE-2014-6193		 CWE-20 Low
No
No
 - 19.12.2014 SB2014121902
#VU41003 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6171		 CWE-79 Low
No
No
 - 19.12.2014 SB2014121902
#VU41017 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6215		 CWE-79 Low
No
No
 - 12.12.2014 SB2014121210
#VU41055 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6093		 CWE-79 Low
No
No
 - 26.11.2014 SB2014112605


Showing elements 41 - 60 out of 103