GCVE - cpe:2.3:a:ibm:websphere_portal:5.1.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_portal:5.1.0.2:*:*:*:*:*:*:*

part: a version: 5.1.0.2 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Websphere Portal (`7939928a-6c2e-51a6-9ecc-4ea696d25144`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-0587`	vulnerable	2026-06-08 05:03:48.692701	Details available Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Portal, (2) Portal 7.0.0.2, (3) Portal 8.0, or (4) PortalWeb2 theme. Published: 2013-08-16T01:00:00.000Z Updated: 2024-08-06T14:33:05.088Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21646618 https://exchange.xforce.ibmcloud.com/vulnerabilities/84345 http://www-01.ibm.com/support/docview.wss?uid=swg1PM90118	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0715`	vulnerable	2026-06-08 04:52:04.107053	Details available Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string. Published: 2010-02-26T19:00:00.000Z Updated: 2024-08-07T00:59:38.510Z Open on db.gcve.eu Reference links http://www.hacktics.com/content/advisories/AdvIBM20100224.html https://exchange.xforce.ibmcloud.com/vulnerabilities/56602 http://www.securityfocus.com/archive/1/509744/100/0/threaded http://www-01.ibm.com/support/docview.wss?uid=swg21421469	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0714`	vulnerable	2026-06-08 04:52:04.064284	Details available Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string. Published: 2010-02-26T19:00:00.000Z Updated: 2024-08-07T00:59:38.582Z Open on db.gcve.eu Reference links http://www.hacktics.com/content/advisories/AdvIBM20100224.html https://exchange.xforce.ibmcloud.com/vulnerabilities/56508 http://www.securitytracker.com/id?1023660 http://www.securityfocus.com/archive/1/509744/100/0/threaded http://www-01.ibm.com/support/docview.wss?uid=swg21421469	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3423`	vulnerable	2026-06-08 04:50:34.573982	Details available IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors. Published: 2008-08-04T01:00:00.000Z Updated: 2024-08-07T09:37:26.642Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1020712 https://exchange.xforce.ibmcloud.com/vulnerabilities/44264 http://www.securityfocus.com/bid/30500 http://www.vupen.com/english/advisories/2008/2405 http://www-1.ibm.com/support/docview.wss?uid=swg1PK67104	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.