Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_portal:7.0.0.0:cf001:*:*:*:*:*:*

part: a version: 7.0.0.0 update: cf001

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Portal (7939928a-6c2e-51a6-9ecc-4ea696d25144)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1189 vulnerable 2026-06-08 05:09:21.259808 Details available
IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558.
Published: 2017-09-07T16:00:00.000Z
Updated: 2024-08-05T13:25:17.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4792 vulnerable 2026-06-08 05:05:45.973556 Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote authenticated users to cause a denial of service (disk consumption) by uploading large files.
Published: 2014-09-12T01:00:00.000Z
Updated: 2024-08-06T11:27:36.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4761 vulnerable 2026-06-08 05:05:45.769600 Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 before 8.0.0.1 CF14, and 8.5.0 through 8.5.0.0 CF02 allows remote authenticated users to discover credentials by reading HTML source code.
Published: 2014-10-10T10:00:00.000Z
Updated: 2024-08-06T11:27:36.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0959 vulnerable 2026-06-08 05:05:15.234662 Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect.
Published: 2014-05-22T10:00:00.000Z
Updated: 2024-08-06T09:34:40.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0958 vulnerable 2026-06-08 05:05:15.233164 Details available
Open redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2014-05-22T10:00:00.000Z
Updated: 2024-08-06T09:34:41.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0956 vulnerable 2026-06-08 05:05:15.209922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0954 vulnerable 2026-06-08 05:05:15.207837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0952 vulnerable 2026-06-08 05:05:15.205691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0951 vulnerable 2026-06-08 05:05:15.198745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0949 vulnerable 2026-06-08 05:05:15.190235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0918 vulnerable 2026-06-08 05:05:15.070992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0917 vulnerable 2026-06-08 05:05:15.069573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6722 vulnerable 2026-06-08 05:05:06.724530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3016 vulnerable 2026-06-08 05:04:29.859553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2950 vulnerable 2026-06-08 05:04:29.556839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0587 vulnerable 2026-06-08 05:03:48.708880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0549 vulnerable 2026-06-08 05:03:48.561212 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.