Cross site scripting

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request...

CVE-2015-0177

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-0177

CVE-2015-0177 is an XSS vulnerability in IBM WebSphere Portal. The issue affects WebSphere Portal 8.5.0 before CF05 (and related 8.0.x/CF patches per Nessus note) where a crafted URL enables remote authenticated users to inject arbitrary script or HTML in a user’s browser. The root cause is impro...

CVE-2014-6125

Cross-site request forgery CSRF vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...