Known vulnerabilities in WebSphere Portal - page 5

Vendor: IBM Corporation
Software: WebSphere Portal
Software CPE: cpe:2.3:a:ibm_corporation:websphere_portal:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Portal WebSphere Portal is affected by 103 known vulnerabilities: 34 medium, 69 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41640 - Improper input validation
CVE-2014-0959		 CWE-20 Low
No
No
 - 22.05.2014 SB2013111303
#VU41665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0917		 CWE-79 Low
No
No
 - 16.05.2014 SB2013111303
#VU41666 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-0918		 CWE-22 Medium
No
No
 - 16.05.2014 SB2013111303
#VU41853 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0901		 CWE-79 Low
No
No
 - 02.04.2014 SB2013111303
#VU41854 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0828		 CWE-79 Low
No
No
 - 02.04.2014 SB2013111303
#VU41970 - Permissions, Privileges, and Access Controls
CVE-2013-6730		 CWE-264 Medium
No
No
 - 05.03.2014 SB2013111303
#VU42046 - Improper input validation
CVE-2013-6722		 CWE-20 Medium
No
No
 - 14.02.2014 SB2013111303
#VU42215 - Permissions, Privileges, and Access Controls
CVE-2013-6316		 CWE-264 Medium
No
No
 - 22.12.2013 SB2013111303
#VU42216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6328		 CWE-79 Low
No
No
 - 22.12.2013 SB2013111303
#VU42217 - Permissions, Privileges, and Access Controls
CVE-2013-6723		 CWE-264 Medium
No
No
 - 22.12.2013 SB2013111303
#VU42218 - Permissions, Privileges, and Access Controls
CVE-2013-6735		 CWE-264 Medium
No
No
 - 22.12.2013 SB2013111303
#VU42359 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5454		 CWE-200 Medium
No
No
 - 18.11.2013 SB2013111303
#VU42378 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5378		 CWE-79 Low
No
No
 - 13.11.2013 SB2013111303
#VU42379 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5379		 CWE-79 Low
No
No
 - 13.11.2013 SB2013111303
#VU42634 - Permissions, Privileges, and Access Controls
CVE-2013-3016		 CWE-264 Medium
No
No
 - 21.08.2013 SB2012113001
#VU42665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-0587		 CWE-79 Low
No
No
 - 16.08.2013 SB2013060402
#VU42820 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-0549		 CWE-79 Low
No
No
 - 04.06.2013 SB2013060402
#VU42821 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-2950		 CWE-94 Low
No
No
 - 04.06.2013 SB2013060402
#VU43284 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2012-4834		 CWE-22 Medium
No
No
 - 30.11.2012 SB2012113001
#VU43916 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2012-2181		 CWE-22 Medium
No
No
 - 04.07.2012 SB2012070405


Showing elements 81 - 100 out of 103