7311 matches found
CVE-2013-4054: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI...
IBM WebSphere Portal Installed (Windows)
Binary data websphereportalinstalled.nbin...
PT-2014-3183
Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale Client versions 7.1 through 8.6.0.4 Description The issue allows remote authenticated users to obtain sensitive information in certain circumstances by leveraging access to the same web container, due to the imprope...
CVE-2013-6734: Undefined Security Weakness
IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote authenticated users to obtain sensitive information in opportunistic circumstances by leveraging access to the same web container...
IBM Connections Portlets for WebSphere Portal Reflected XSS
The version of WebSphere Portal on the remote host is affected by a reflected cross-site scripting vulnerability if the version of Connections Portlets installed is not 4.5.1 FP1 or newer. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72646; scriptversion"1.6";...
CVE-2014-0855
Multiple cross-site scripting XSS vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6722
Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vectors...
Unrestricted file upload
Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vectors...
Directory traversal
The charting component in IBM WebSphere Dashboard Framework WDF 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory...
CVE-2014-0855
Multiple cross-site scripting XSS vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6728
The charting component in IBM WebSphere Dashboard Framework WDF 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory...
CVE-2014-0855
CVE-2014-0855 affects IBM Connections Portlets for WebSphere Portal (IBM WebSphere Portal 7.0.0.2 and 8.0.0.1) with Portlets 4.x prior to 4.5.1 FP1. The vulnerability is described as a reflected XSS in the Portlets, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors...
CVE-2013-6722
CVE-2013-6722 affects IBM WebSphere Portal 7.x (before 7.0.0.2 CF27) and 8.x (through 8.0.0.1 CF09). The issue is an unrestricted remote file upload in the Registration/Edit My Profile portlet, which can enable remote attackers to cause a denial of service or modify data via unspecified vectors. ...
CVE-2013-6722
Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vectors...
PT-2014-3174
Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 7.0.0.2 CF26 and 8.x through 8.0.0.1 CF08 Description The issue is related to an unrestricted file upload vulnerability in the Registration/Edit My Profile portlet. This vulnerability can be exploited ...
CVE-2013-6728: Undefined Security Weakness
The charting component in IBM WebSphere Dashboard Framework WDF 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory...
CVE-2013-6722: Undefined Security Weakness
Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vectors...
CVE-2014-0855: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-3178
Name of the Vulnerable Software and Affected Versions IBM WebSphere Dashboard Framework versions 6.1.5 through 7.0.1 Description The issue concerns the charting component in IBM WebSphere Dashboard Framework, which has incorrect security constraints for a temporary directory. This allows remote...
CVE-2013-2962
Buffer overflow in the Launcher in IBM WebSphere Transformation Extender 8.4.x before 8.4.0.4 allows local users to cause a denial of service process crash or Admin Console command-stream outage via unspecified vectors...