IBM WebSphere Portal 8.5.0 < 8.5.0 CF03 Multiple Vulnerabilities

The version of IBM WebSphere Portal installed on the remote host is affected by the multiple vulnerabilities : - Multiple vulnerabilities exist in the Apache Cordova component, including cross-application scripting, security bypass, and information disclosure. CVE-2014-3500, CVE-2014-3501,...

CVE-2014-6125

Cross-site request forgery CSRF vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2014-6126

CVE-2014-6126 is an XSS vulnerability affecting IBM WebSphere Portal 8.5.0 before CF03, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The connected Nessus entry confirms the CVE among multiple issues in CF03, but the provided documents do not specify exploit d...