CVE-2018-1361

Description

References

• securityfocus.com/bid/102501 · Third Party Advisory
• securitytracker.com/id/1040132 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/137158 · VDB Entry
• ibm.com/support/docview.wss · Patch

More vulnerabilities in websphere portal

• CVE-2018-1673MEDIUM 6.1IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc…
• CVE-2018-1672MEDIUM 6.3IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a u…
• CVE-2018-1420MEDIUM 6.5IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fi…
• CVE-2018-1820MEDIUM 5.4IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …
• CVE-2018-1736MEDIUM 6.1IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By per…