CVE-2013-6735

概要

参考情報

• osvdb.org/101255
• packetstormsecurity.com/files/124611/IBM-Web-Content-Manager-XPath-Injection.html · Exploit
• secunia.com/advisories/56161
• www-01.ibm.com/support/docview.wss · Not Applicable
• www-01.ibm.com/support/docview.wss · Patch
• securityfocus.com/archive/1/530552/100/0/threaded
• securityfocus.com/bid/64496 · Third Party Advisory
• securitytracker.com/id/1029539 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/89591
• www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_fix_available_for_unauthorized_information_retrieval_security_vulnerability_in_ibm_websphere_portal_cve_2013_6735 · Third Party Advisory

websphere portal のその他の脆弱性

• CVE-2018-1673中 6.1IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc…
• CVE-2018-1672中 6.3IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a u…
• CVE-2018-1420中 6.5IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fi…
• CVE-2018-1820中 5.4IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …
• CVE-2018-1736中 6.1IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By per…