VYPR

Websphere Portal Unified Task List Portlet

by IBM

CVEs (4)

  • CVE-2014-3057Jul 29, 2014
    risk 0.00cvss epss 0.00

    Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

  • CVE-2014-3056Jul 29, 2014
    risk 0.00cvss epss 0.00

    The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.

  • CVE-2014-3055Jul 29, 2014
    risk 0.00cvss epss 0.00

    SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2014-3054Jul 29, 2014
    risk 0.00cvss epss 0.00

    Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.