CVE-2018-1420medium

CVE-2018-1420: medium-severity vulnerability in IBM WebSphere Portal

Published · Updated

Follow this CVE+ Monitor WebSphere Portal

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 1.3%
IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.
CVSS:3.0/A:N/AC:H/AV:N/C:N/I:H/PR:L/S:U/UI:N/E:U/RC:C/RL:O
Affected products
IBM · WebSphere Portal
Related CVEs — IBM WebSphere Portal

In the same product, most dangerous first.

CVE-2017-1577—CVE-2017-1577EPSS 2.9%CVE-2017-1698—CVE-2017-1698EPSS 1.6%CVE-2018-1736HIGHCVE-2018-1736EPSS 1.5%CVE-2018-1673MEDIUMCVE-2018-1673EPSS 1.3%CVE-2018-1716MEDIUMCVE-2018-1716EPSS 1.3%CVE-2017-1423—CVE-2017-1423EPSS 1.3%