Skip to content

Known vulnerabilities in IBM WebSphere Portal

Is your version affected?

CVE Summary Score Published
CVE-2018-1673 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting 6.1 Medium Oct 12, 2018
CVE-2018-1672 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios,… 5.0 Medium Oct 1, 2018
CVE-2018-1420 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during… 5.3 Medium Oct 1, 2018
CVE-2018-1820 IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting 5.4 Medium Sep 27, 2018
CVE-2018-1736 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open… 7.4 High Sep 27, 2018
CVE-2018-1716 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting 6.1 Medium Sep 27, 2018
CVE-2018-1660 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting 5.4 Medium Sep 27, 2018
CVE-2018-1445 IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting Not rated Apr 17, 2018
CVE-2018-1483 IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting 6.1 Medium Apr 11, 2018
CVE-2018-1444 IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting 5.4 Medium Mar 14, 2018
CVE-2018-1416 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting Not rated Feb 27, 2018
CVE-2018-1401 IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting Not rated Feb 9, 2018
CVE-2017-1761 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting Not rated Feb 9, 2018
CVE-2018-1361 IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting Not rated Jan 11, 2018
CVE-2017-1698 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead… Not rated Dec 27, 2017
CVE-2017-1423 IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge… Not rated Dec 20, 2017
CVE-2017-1536 IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting Not rated Dec 11, 2017
CVE-2017-1577 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system Not rated Sep 27, 2017
CVE-2017-1303 IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting 6.1 Medium Jul 31, 2017
CVE-2017-1217 IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting Not rated Jul 5, 2017

Other IBM products