CVE-2018-1483

Published: Apr 11, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140918.

Affected (19)

Products: Ibm: Websphere Portal

Ibm

1 product

Websphere Portal

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Portal	Version 8.5.0.0
Ibm Websphere Portal	Version 8.5.0.0 cf10
Ibm Websphere Portal	Version 8.5.0.0 cf11
Ibm Websphere Portal	Version 8.5.0.0 cf12
Ibm Websphere Portal	Version 8.5.0.0 cf13
Ibm Websphere Portal	Version 8.5.0.0 cf14
Ibm Websphere Portal	Version 8.5.0.0 cf15
Ibm Websphere Portal	Version 8.5.0.0 cf1
Ibm Websphere Portal	Version 8.5.0.0 cf2
Ibm Websphere Portal	Version 8.5.0.0 cf3
Ibm Websphere Portal	Version 8.5.0.0 cf4
Ibm Websphere Portal	Version 8.5.0.0 cf5
Ibm Websphere Portal	Version 8.5.0.0 cf6
Ibm Websphere Portal	Version 8.5.0.0 cf7
Ibm Websphere Portal	Version 8.5.0.0 cf8
Ibm Websphere Portal	Version 8.5.0.0 cf9
Ibm Websphere Portal	Version 9.0
Ibm Websphere Portal	Version 9.0 cf14
Ibm Websphere Portal	Version 9.0 cf15