Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Portal, (2) Portal 7.0.0.2, (3) Portal 8.0, or (4) PortalWeb2 theme.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21646618
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84345
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM90118
Scores
EPSS
0.0115
EPSS Percentile
63.5%
Details
CWE
CWE-79
Status
published
Products (27)
ibm/websphere_portal
5.1.0.0
ibm/websphere_portal
5.1.0.1
ibm/websphere_portal
5.1.0.2
ibm/websphere_portal
5.1.0.3
ibm/websphere_portal
5.1.0.4
ibm/websphere_portal
5.1.0.5
ibm/websphere_portal
6.0.0.0
ibm/websphere_portal
6.0.0.1
ibm/websphere_portal
6.0.0.2
ibm/websphere_portal
6.0.0.3
... and 17 more
Published
Aug 16, 2013
Tracked Since
Feb 18, 2026