Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_portal:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Portal (7939928a-6c2e-51a6-9ecc-4ea696d25144)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1536 vulnerable 2026-06-08 05:09:22.557124 Details available
IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130733.
Published: 2017-12-11T21:00:00.000Z
Updated: 2024-09-16T22:45:25.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1303 vulnerable 2026-06-08 05:09:21.681752 Details available
IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125457.
Published: 2017-07-31T21:00:00.000Z
Updated: 2025-12-04T14:55:34.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1189 vulnerable 2026-06-08 05:09:21.280321 Details available
IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558.
Published: 2017-09-07T16:00:00.000Z
Updated: 2024-08-05T13:25:17.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8922 vulnerable 2026-06-08 05:08:22.073332 Details available
Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T02:35:02.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4792 vulnerable 2026-06-08 05:05:45.974110 Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote authenticated users to cause a denial of service (disk consumption) by uploading large files.
Published: 2014-09-12T01:00:00.000Z
Updated: 2024-08-06T11:27:36.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4762 vulnerable 2026-06-08 05:05:45.795572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4761 vulnerable 2026-06-08 05:05:45.785263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6722 vulnerable 2026-06-08 05:05:06.740476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5454 vulnerable 2026-06-08 05:04:51.726486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3016 vulnerable 2026-06-08 05:04:29.859571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2950 vulnerable 2026-06-08 05:04:29.550758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0587 vulnerable 2026-06-08 05:03:48.709331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0549 vulnerable 2026-06-08 05:03:48.574234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2181 vulnerable 2026-06-08 05:00:53.197985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.