Known vulnerabilities in WebSphere Portal - page 4

Vendor: IBM Corporation
Software: WebSphere Portal
Software CPE: cpe:2.3:a:ibm_corporation:websphere_portal:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Portal WebSphere Portal is affected by 103 known vulnerabilities: 34 medium, 69 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41187 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6125		 CWE-79 Low
No
No
 - 28.10.2014 SB2014081203
#VU41188 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6126		 CWE-79 Low
No
No
 - 28.10.2014 SB2014081203
#VU41189 - Improper input validation
CVE-2014-4808		 CWE-20 Low
No
No
 - 28.10.2014 SB2013111303
#VU41190 - Resource Management Errors
CVE-2014-4814		 CWE-399 Low
No
No
 - 28.10.2014 SB2014081203
#VU41191 - Exposure of sensitive information to an unauthorized actor
CVE-2014-4821		 CWE-200 Medium
No
No
 - 28.10.2014 SB2014081203
#VU41226 - Exposure of sensitive information to an unauthorized actor
CVE-2014-4761		 CWE-200 Low
No
No
 - 10.10.2014 SB2014081203
#VU41336 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4762		 CWE-79 Low
No
No
 - 12.09.2014 SB2014081203
#VU41337 - Resource Management Errors
CVE-2014-4792		 CWE-399 Low
No
No
 - 12.09.2014 SB2014081203
#VU41419 - Improper input validation
CVE-2014-4760		 CWE-20 Medium
No
No
 - 12.08.2014 SB2014081203
#VU41420 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0953		 CWE-79 Low
No
No
 - 12.08.2014 SB2014081204
#VU41421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3102		 CWE-79 Low
No
No
 - 12.08.2014 SB2014081204
#VU41422 - Exposure of sensitive information to an unauthorized actor
CVE-2014-4746		 CWE-200 Medium
No
No
 - 12.08.2014 SB2014081203
#VU41545 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0910		 CWE-79 Low
Available
No
 - 18.06.2014 SB2014061806
#VU41633 - Resource Management Errors
CVE-2014-0949		 CWE-399 Medium
No
No
 - 22.05.2014 SB2013111303
#VU41634 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0951		 CWE-79 Low
No
No
 - 22.05.2014 SB2013111303
#VU41635 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0952		 CWE-79 Low
No
No
 - 22.05.2014 SB2013111303
#VU41636 - Improper input validation
CVE-2014-0954		 CWE-20 Medium
No
No
 - 22.05.2014 SB2013111303
#VU41637 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0955		 CWE-79 Low
No
No
 - 22.05.2014 SB2013111303
#VU41638 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0956		 CWE-79 Low
No
No
 - 22.05.2014 SB2013111303
#VU41639 - Improper input validation
CVE-2014-0958		 CWE-20 Medium
No
No
 - 22.05.2014 SB2013111303


Showing elements 61 - 80 out of 103