IBM Websphere Portal 7.0.0.2 Cumulative Fix 27
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf27:*:*:*:*:*:*
part: a version: 7.0.0.2 update: cf27
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Portal (7939928a-6c2e-51a6-9ecc-4ea696d25144) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1189 |
vulnerable | 2026-06-08 05:09:21.279792 |
Details available
IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558.
Published: 2017-09-07T16:00:00.000Z
Updated: 2024-08-05T13:25:17.434Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4792 |
vulnerable | 2026-06-08 05:05:45.974072 |
Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote authenticated users to cause a denial of service (disk consumption) by uploading large files.
Published: 2014-09-12T01:00:00.000Z
Updated: 2024-08-06T11:27:36.820Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4761 |
vulnerable | 2026-06-08 05:05:45.783986 |
Details available
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 before 8.0.0.1 CF14, and 8.5.0 through 8.5.0.0 CF02 allows remote authenticated users to discover credentials by reading HTML source code.
Published: 2014-10-10T10:00:00.000Z
Updated: 2024-08-06T11:27:36.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3057 |
vulnerable | 2026-06-08 05:05:30.923885 |
Details available
Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-07-29T20:00:00.000Z
Updated: 2024-08-06T10:28:46.294Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3056 |
vulnerable | 2026-06-08 05:05:30.922482 |
Details available
The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.
Published: 2014-07-29T20:00:00.000Z
Updated: 2024-08-06T10:28:46.417Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3055 |
vulnerable | 2026-06-08 05:05:30.921005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3054 |
vulnerable | 2026-06-08 05:05:30.911759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0959 |
vulnerable | 2026-06-08 05:05:15.235179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0958 |
vulnerable | 2026-06-08 05:05:15.233629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0956 |
vulnerable | 2026-06-08 05:05:15.210391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0954 |
vulnerable | 2026-06-08 05:05:15.208298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0952 |
vulnerable | 2026-06-08 05:05:15.206167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0951 |
vulnerable | 2026-06-08 05:05:15.199221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0949 |
vulnerable | 2026-06-08 05:05:15.190735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0918 |
vulnerable | 2026-06-08 05:05:15.071524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0917 |
vulnerable | 2026-06-08 05:05:15.070078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6722 |
vulnerable | 2026-06-08 05:05:06.740005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.