Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2013-3016

IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a crafted request for a servlet, related to the serveServletsByClassnameEnabled setting.

  • Published: Aug 21, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-3016
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
ibm / websphere_portal 7.0.0.0 7.0.0.0.x
ibm / websphere_portal 8.0.0.0 8.0.0.0.x
ibm / websphere_portal 8.0.0.0-cf04 8.0.0.0-cf04.x
ibm / websphere_portal 7.0.0.0-cf001 7.0.0.0-cf001.x
ibm / websphere_portal 8.0.0.0-cf01 8.0.0.0-cf01.x
ibm / websphere_portal 8.0.0.0-cf02 8.0.0.0-cf02.x
ibm / websphere_portal 8.0.0.0-cf05 8.0.0.0-cf05.x
ibm / websphere_portal 8.0.0.0-cf03 8.0.0.0-cf03.x
ibm / websphere_portal 8.0 8.0.x
ibm / websphere_portal 6.1.0.0 6.1.0.0.x