CVE-2016-2901

IBM WebSphere Portal 8.5 CF08–CF10 (and Web Content Manager) is affected by CVE-2016-2901 due to a CSRF/XSRF vulnerability in the PA_Theme_Creator. An unauthenticated remote attacker could exploit specially crafted requests to hijack the authentication of arbitrary users and perform actions that ...

CVE-2011-2754

CVE-2011-2754 affects IBM WebSphere Portal 7.x (PageBuilder2/Page Builder theme) as used by IBM Web Content Manager and related products. It is a cross-site scripting (XSS) vulnerability in which remote attackers can inject arbitrary web script or HTML via unspecified vectors. The issue is tied t...