CVE-2016-2989

CVE-2016-2989 corresponds to an open redirect vulnerability in IBM WebSphere Portal’s Connections Portlets (5.x) prior to 5.0.2. The issue enables remote attackers to redirect users to arbitrary sites, enabling phishing-like attacks via unspecified vectors. Affected component: Connections Portlet...

CVE-2014-0855

CVE-2014-0855 affects IBM Connections Portlets for WebSphere Portal (IBM WebSphere Portal 7.0.0.2 and 8.0.0.1) with Portlets 4.x prior to 4.5.1 FP1. The vulnerability is described as a reflected XSS in the Portlets, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors...