Connections Portlets

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-2989 MEDIUM PATCH This Month

Open redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM WebSphere Portal allows remote attackers to redirect users to arbitrary web sites and conduct phishing. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

IBM Open Redirect Authentication Bypass Connections Portlets

NVD

CVSS 3.0

6.5

EPSS

0.2%

CVE-2014-0855 MEDIUM This Month

Multiple cross-site scripting (XSS) vulnerabilities in IBM Connections Portlets 4.x before 4.5.1 FP1 for IBM WebSphere Portal 7.0.0.2 and 8.0.0.1 allow remote attackers to inject arbitrary web script. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

IBM XSS Connections Portlets

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2016-2989

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

IBM Open Redirect Authentication Bypass +1

NVD

CVE-2014-0855

EPSS 0% CVSS 4.3

MEDIUM This Month

IBM XSS Connections Portlets

NVD