CVE-2014-3057
29.07.2014, 20:55
Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
| Vendor | Product | Version |
|---|---|---|
| ibm | websphere_portal | 7.0.0.0 |
| ibm | websphere_portal | 7.0.0.1:cf003 |
| ibm | websphere_portal | 7.0.0.1:cf004 |
| ibm | websphere_portal | 7.0.0.1:cf005 |
| ibm | websphere_portal | 7.0.0.1:cf006 |
| ibm | websphere_portal | 7.0.0.1:cf007 |
| ibm | websphere_portal | 7.0.0.1:cf008 |
| ibm | websphere_portal | 7.0.0.1:cf009 |
| ibm | websphere_portal | 7.0.0.1:cf010 |
| ibm | websphere_portal | 7.0.0.1:cf019 |
| ibm | websphere_portal | 7.0.0.2 |
| ibm | websphere_portal | 7.0.0.2 |
| ibm | websphere_portal | 7.0.0.2:cf011 |
| ibm | websphere_portal | 7.0.0.2:cf012 |
| ibm | websphere_portal | 7.0.0.2:cf013 |
| ibm | websphere_portal | 7.0.0.2:cf014 |
| ibm | websphere_portal | 7.0.0.2:cf015 |
| ibm | websphere_portal | 7.0.0.2:cf016 |
| ibm | websphere_portal | 7.0.0.2:cf017 |
| ibm | websphere_portal | 7.0.0.2:cf018 |
| ibm | websphere_portal | 7.0.0.2:cf019 |
| ibm | websphere_portal | 7.0.0.2:cf020 |
| ibm | websphere_portal | 7.0.0.2:cf021 |
| ibm | websphere_portal | 7.0.0.2:cf022 |
| ibm | websphere_portal | 7.0.0.2:cf23 |
| ibm | websphere_portal | 7.0.0.2:cf24 |
| ibm | websphere_portal | 7.0.0.2:cf25 |
| ibm | websphere_portal | 7.0.0.2:cf26 |
| ibm | websphere_portal | 7.0.0.2:cf27 |
| ibm | websphere_portal | 8.0.0.0 |
| ibm | websphere_portal | 8.0.0.0:cf01 |
| ibm | websphere_portal | 8.0.0.0:cf02 |
| ibm | websphere_portal | 8.0.0.0:cf03 |
| ibm | websphere_portal | 8.0.0.0:cf04 |
| ibm | websphere_portal | 8.0.0.0:cf05 |
| ibm | websphere_portal | 8.0.0.1 |
| ibm | websphere_portal | 8.0.0.1:cf04 |
| ibm | websphere_portal | 8.0.0.1:cf05 |
| ibm | websphere_portal | 8.0.0.1:cf06 |
| ibm | websphere_portal | 8.0.0.1:cf07 |
| ibm | websphere_portal | 8.0.0.1:cf08 |
| ibm | websphere_portal | 8.0.0.1:cf09 |
| ibm | websphere_portal | 8.0.0.1:cf12 |
| ibm | websphere_portal_unified_task_list_portlet | 6.0.1 |
𝑥
= Vulnerable software versions
References