Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_portal:6.1.0.6:cf27:*:*:*:*:*:*

part: a version: 6.1.0.6 update: cf27

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Portal (7939928a-6c2e-51a6-9ecc-4ea696d25144)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6215 vulnerable 2026-06-08 05:05:56.850662 Details available
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-12-11T23:00:00.000Z
Updated: 2024-08-06T12:10:12.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4792 vulnerable 2026-06-08 05:05:45.973431 Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote authenticated users to cause a denial of service (disk consumption) by uploading large files.
Published: 2014-09-12T01:00:00.000Z
Updated: 2024-08-06T11:27:36.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4761 vulnerable 2026-06-08 05:05:45.761375 Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 before 8.0.0.1 CF14, and 8.5.0 through 8.5.0.0 CF02 allows remote authenticated users to discover credentials by reading HTML source code.
Published: 2014-10-10T10:00:00.000Z
Updated: 2024-08-06T11:27:36.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0959 vulnerable 2026-06-08 05:05:15.234548 Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect.
Published: 2014-05-22T10:00:00.000Z
Updated: 2024-08-06T09:34:40.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0958 vulnerable 2026-06-08 05:05:15.233043 Details available
Open redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2014-05-22T10:00:00.000Z
Updated: 2024-08-06T09:34:41.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0956 vulnerable 2026-06-08 05:05:15.209812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0954 vulnerable 2026-06-08 05:05:15.207726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0952 vulnerable 2026-06-08 05:05:15.205580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0951 vulnerable 2026-06-08 05:05:15.198682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0949 vulnerable 2026-06-08 05:05:15.189064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.