Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Websphere_portal_unified_task_list_portlet
(Ibm)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 4 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2014-07-29 | CVE-2014-3057 | Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. | Websphere_portal, Websphere_portal_unified_task_list_portlet | N/A | ||
| 2014-07-29 | CVE-2014-3056 | The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors. | Websphere_portal, Websphere_portal_unified_task_list_portlet | N/A | ||
| 2014-07-29 | CVE-2014-3055 | SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | Websphere_portal, Websphere_portal_unified_task_list_portlet | N/A | ||
| 2014-07-29 | CVE-2014-3054 | Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. | Websphere_portal, Websphere_portal_unified_task_list_portlet | N/A |