IBM WebSphere Portal Web Content Viewer Portlet Privilege Escalation (PI15723)

The version of IBM WebSphere Portal on the remote host is affected by a privilege escalation vulnerability in the Web Content Viewer portlet due to improper handling of JSP includes. A remote attacker is able to obtain sensitive information, cause a denial of service, or control the request...

CVE-2013-0549

Cross-site scripting XSS vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a...

CVE-2013-0549: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a...

PT-2013-2422

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0.0.x through 7.0.0.2 CF22 IBM WebSphere Portal versions 8.0.0.x through 8.0.0.1 CF5 Description A cross-site scripting XSS issue exists in the Web Content Manager - Web Content Viewer Portlet when the IBM Portl...