IBM » Web Content Manager : Security Vulnerabilities, CVEs, Published In 2011
Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Max CVSS
4.3
EPSS Score
0.10%
Published
2011-07-17
Updated
2011-07-19
Race condition in IBM Web Content Manager (WCM) 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service (infinite recursive query) via unspecified vectors, related to a StackOverflowError exception.
Max CVSS
3.5
EPSS Score
0.12%
Published
2011-05-26
Updated
2011-07-13
The authoring tool in IBM Web Content Manager (WCM) 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges.
Max CVSS
4.0
EPSS Score
0.07%
Published
2011-05-26
Updated
2011-05-26
3 vulnerabilities found