CVE-2018-1444

Published: Mar 14, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139906.

Affected (19)

Products: Ibm: Websphere Portal

Ibm

1 product

Websphere Portal

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Portal	Version 8.5.0.0
Ibm Websphere Portal	Version 8.5.0.0 cf01
Ibm Websphere Portal	Version 8.5.0.0 cf02
Ibm Websphere Portal	Version 8.5.0.0 cf03
Ibm Websphere Portal	Version 8.5.0.0 cf04
Ibm Websphere Portal	Version 8.5.0.0 cf05
Ibm Websphere Portal	Version 8.5.0.0 cf06
Ibm Websphere Portal	Version 8.5.0.0 cf07
Ibm Websphere Portal	Version 8.5.0.0 cf08
Ibm Websphere Portal	Version 8.5.0.0 cf09
Ibm Websphere Portal	Version 8.5.0.0 cf10
Ibm Websphere Portal	Version 8.5.0.0 cf11
Ibm Websphere Portal	Version 8.5.0.0 cf12
Ibm Websphere Portal	Version 8.5.0.0 cf13
Ibm Websphere Portal	Version 8.5.0.0 cf14
Ibm Websphere Portal	Version 8.5.0.0 cf15
Ibm Websphere Portal	Version 9.0.0.0
Ibm Websphere Portal	Version 9.0.0.0 cf14
Ibm Websphere Portal	Version 9.0.0.0 cf15