CVE-2018-1445

IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139907.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg22015407Vendor Advisory
• http://www.securitytracker.com/id/1040647Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/139907VDB Entry
• http://www-01.ibm.com/support/docview.wss?uid=swg22015407Vendor Advisory
• http://www.securitytracker.com/id/1040647Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/139907VDB Entry

Published

Apr 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14444libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::dec…
• CVE-2018-14445In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp a…
• CVE-2018-14446MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 a…
• CVE-2018-14447trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-o…
• CVE-2018-14448Codec::parse in track.cpp in Untrunc through 2018-06-07 has …
• CVE-2018-14449An issue was discovered in libgig 4.1.0. There is an out of …
• CVE-2018-14450An issue was discovered in libgig 4.1.0. There is an out-of-…
• CVE-2018-14451An issue was discovered in libgig 4.1.0. There is a heap-bas…
• CVE-2018-14452An issue was discovered in libgig 4.1.0. There is an out-of-…
• CVE-2018-14453An issue was discovered in libgig 4.1.0. There is a heap-bas…
• CVE-2018-14454An issue was discovered in libgig 4.1.0. There is an out-of-…
• CVE-2018-14455An issue was discovered in libgig 4.1.0. There is an out-of-…