Description
IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a crafted request for a servlet, related to the serveServletsByClassnameEnabled setting.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84350
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21647344
Scores
EPSS
0.0117
EPSS Percentile
64.2%
Details
CWE
CWE-264
Status
published
Products (4)
ibm/websphere_portal
6.1.0.0
ibm/websphere_portal
7.0.0.0 (2 CPE variants)
ibm/websphere_portal
8.0
ibm/websphere_portal
8.0.0.0 (6 CPE variants)
Published
Aug 21, 2013
Tracked Since
Feb 18, 2026