CVE-2018-1820

IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150096.

• CWE-79

• http://www.securitytracker.com/id/1041751Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/150096VDB Entry
• https://www.ibm.com/support/docview.wss?uid=ibm10732287Patch, Vendor Advisory
• http://www.securitytracker.com/id/1041751Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/150096VDB Entry
• https://www.ibm.com/support/docview.wss?uid=ibm10732287Patch, Vendor Advisory

Published

Sep 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18194An issue was discovered in libgig 4.1.0. There is a heap-bas…
• CVE-2018-18195An issue was discovered in libgig 4.1.0. There is an FPE (di…
• CVE-2018-18196An issue was discovered in libgig 4.1.0. There is a heap-bas…
• CVE-2018-18197An issue was discovered in libgig 4.1.0. There is an operato…
• CVE-2018-18198The $opener_input_field variable in addons/mediapool/pages/i…
• CVE-2018-18199Mediamanager in REDAXO before 5.6.4 has XSS.
• CVE-2018-18200There is a SQL injection in Benutzerverwaltung in REDAXO bef…
• CVE-2018-18201qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&act…
• CVE-2018-18202The QLogic 4Gb Fibre Channel 5.5.2.6.0 and 4/8Gb SAN 7.10.1.…
• CVE-2018-18203A vulnerability in the update mechanism of Subaru StarLink H…
• CVE-2018-18205Topvision CC8800 CMTS C-E devices allow remote attackers to …
• CVE-2018-18206In the client in Bytom before 1.0.6, checkTopicRegister in p…