The version of IBM WebSphere Portal installed on the remote Windows host is 8.5.0 prior to 8.5.0.0 CF14 or 9.0.0 prior to CF14. It is, therefore, affected by multiple vulnerabilities :

  - Multiple cross-site scripting (XSS) vulnerabilities     exist in the web UI due to improper validation of     user-supplied input before returning it to users. An     unauthenticated, remote attacker can exploit these, via     a specially crafted request, to execute arbitrary script     code in a user's browser session. (CVE-2017-1120,     CVE-2017-1217)

  - A cross-site redirection vulnerability exists due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, by     convincing a user to follow a specially crafted link,     to redirect the unsuspecting user from an intended     trusted website to an arbitrary website of the     attacker's choosing, which then can be used to conduct     further attacks. (CVE-2017-1156)

  - A use-after-free error exists in the Outside In Filters     subcomponent when handling PageHeight and PageWidth     values in VSDX files. An unauthenticated, remote     attacker can exploit this to deference already freed     memory, resulting in the execution of arbitrary code.
    (CVE-2017-3266)

  - Multiple unspecified flaws exist in the Outside In     Filters subcomponent that allow an unauthenticated,     remote attacker to cause a denial of service condition.
    (CVE-2017-3267, CVE-2017-3268, CVE-2017-3270)

  - Multiple unspecified flaws exist in the Outside In     Filters subcomponent that allow an unauthenticated,     remote attacker to impact confidentiality, integrity,     and availability. (CVE-2017-3269, CVE-2017-3271,     CVE-2017-3293)

  - A denial of service vulnerability exists in the Outside     In Filters subcomponent, specifically in the Content     Access functionality within the vspdf.dll library, when     parsing the /Pages key in a Catalog Dictionary. An     unauthenticated, remote attacker can exploit this, via a     specially crafted PDF file, to crash an application     linked to the library. (CVE-2017-3294)

  - A denial of service vulnerability exists in the Outside     In Filters subcomponent, specifically in the Content     Access functionality within the vspdf.dll library, when     parsing the /Matrix entry in a /CalRGB element within a     PDF file. An unauthenticated, remote attacker can     exploit this, via a specially crafted PDF file that     triggers an invalid read, to crash an application linked     to the library. (CVE-2017-3295)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site redirection vulnerability due to improper validation of unspecified input. An unauthenticated, remote attacker can exploit this vulnerability, by convincing a user to follow a specially crafted link, to redirect a user from a legitimate website to a malicious website of the attacker's choosing, in which the attacker is able to spoof the URL that is displayed to the user.
This can allow the attacker to obtain sensitive information or to conduct further attacks.

リモートのWindowsホストにインストールされたIBM WebSphere Portalのバージョンは、8.5.0.0 CF14より前の8.5.0またはCF14より前の9.0.0です。したがって、以下の複数の脆弱性による影響を受けます。

  - Multiple cross-site scripting (XSS) vulnerabilities exist in the web UI due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit these, via a specially crafted request, to execute arbitrary script code in a user's browser session. (CVE-2017-1120, CVE-2017-1217)

  - A cross-site redirection vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to follow a specially crafted link, to redirect the unsuspecting user from an intended trusted website to an arbitrary website of the attacker's choosing, which then can be used to conduct further attacks. (CVE-2017-1156)

  - A use-after-free error exists in the Outside In Filters subcomponent when handling PageHeight and PageWidth values in VSDX files. 認証されていないリモートの攻撃者がこれを悪用し、すでに解放されたメモリをデリファレンスして、任意のコードを実行する可能性があります。
    (CVE-2017-3266)

  - Multiple unspecified flaws exist in the Outside In Filters subcomponent that allow an unauthenticated, remote attacker to cause a denial of service condition.
    (CVE-2017-3267, CVE-2017-3268, CVE-2017-3270)

  - Multiple unspecified flaws exist in the Outside In Filters subcomponent that allow an unauthenticated, remote attacker to impact confidentiality, integrity, and availability. (CVE-2017-3269, CVE-2017-3271, CVE-2017-3293)

  - A denial of service vulnerability exists in the Outside In Filters subcomponent, specifically in the Content Access functionality within the vspdf.dll library, when parsing the /Pages key in a Catalog Dictionary. An unauthenticated, remote attacker can exploit this, via a specially crafted PDF file, to crash an application linked to the library. (CVE-2017-3294)

  - A denial of service vulnerability exists in the Outside In Filters subcomponent, specifically in the Content Access functionality within the vspdf.dll library, when parsing the /Matrix entry in a /CalRGB element within a PDF file. An unauthenticated, remote attacker can exploit this, via a specially crafted PDF file that triggers an invalid read, to crash an application linked to the library. (CVE-2017-3295)

リモートのWindowsホストにインストールされているIBM WebSphere Portalのバージョンは、ユーザー指定の入力が不適切に検証されているため、クロスサイトリダイレクトの脆弱性の影響を受けます。認証されていないリモートの攻撃者がこの脆弱性を悪用し、ユーザーを誘導して、特別に細工されたリンクをたどらせることで、正当なWebサイトから攻撃者が選択してユーザーに表示されるURLを偽装できる、悪意のあるWebサイトにリダイレクトする可能性があります。これにより、攻撃者は秘密情報を入手したり、さらに攻撃を仕掛けたりする可能性があります。

遠端 Windows 主機上安裝的 IBM WebSphere Portal 版本是 8.5.0.0 CF14 之前的 8.5.0 版或 CF14 之前的 9.0.0 版。因此，會受到多個弱點影響：- 網路 UI 中存在多個跨網站指令碼 (XSS) 弱點，這是因為未正確驗證使用者提供的輸入，便將其傳回給使用者所導致。未經驗證的遠端攻擊者可透過特製的要求惡意利用此弱點，藉此在使用者的瀏覽器工作階段中執行任意指令碼。(CVE-2017-1120、CVE-2017-1217) - 存在一個跨網站重新導向弱點，這是因為不當驗證使用者提供的輸入所導致。未經驗證的遠端攻擊者可惡意利用此弱點，誘騙使用者前往特製的連結，進而將將毫無戒心的使用者從預期的受信任網站重新導向到攻擊者選擇的任意網站，然後可以用來執行進一步的攻擊。(CVE-2017-1156) - 在處理 VSDX 檔案中的 PageHeight 和 PageWidth 值時，Outside In Filters 子元件中存在一個釋放後使用錯誤。未經驗證的遠端攻擊者可加以惡意利用，解除參照已釋放的記憶體，進而導致執行任意程式碼。(CVE-2017-3266) - Outside In Filters 子元件中存在多個不明缺陷，可允許未經驗證的遠端攻擊者造成拒絕服務情形。(CVE-2017-3267、CVE-2017-3268、CVE-2017-3270) - Outside In Filters 子元件中存在多個不明缺陷，可允許未經驗證的遠端攻擊者影響機密性、完整性和可用性。(CVE-2017-3269、CVE-2017-3271、CVE-2017-3293) - 在剖析 Catalog Dictionary 中的 /Pages 金鑰時，Outside In Filters 子元件中存在一個拒絕服務弱點，尤其是 vspdf.dll 程式庫內的 Content Access 功能。未經驗證的遠端攻擊者可惡意利用此弱點，透過特製的 PDF 檔案，損毀連結至程式庫的應用程式。(CVE-2017-3294) - 在剖析 PDF 檔案內 /CalRGB 元素中的 /Matrix 項目時，Outside In Filters 子元件中存在一個拒絕服務弱點，尤其是 vspdf.dll 程式庫內的 Content Access 功能。未經驗證的遠端攻擊者可惡意利用此弱點，透過觸發無效讀取的特製 PDF 檔案，損毀連結至程式庫的應用程式。(CVE-2017-3295)

远程主机上安装的 IBM WebSphere Portal 版本受到跨站重定向漏洞的影响，这是因为未正确验证不明输入所致。未经身份验证的远程攻击者可利用此漏洞，诱使用户前往特制的链接，进而将用户从合法网站重定向至攻击者所选的恶意网站，让攻击者得以伪造向用户显示的 URL。如此一来，攻击者即可获得敏感信息或发动进一步攻击。

遠端 Windows 主機上安裝的 IBM WebSphere Portal 版本受到一個不明跨網站重新導向弱點的影響，這是因為不當驗證不明輸入所致。未經驗證的遠端攻擊者可惡意利用此弱點，誘騙使用者前往特製的連結，進而將使用者從受信任網站重新導向到攻擊者選擇的惡意網站，讓攻擊者得以偽造向使用者顯示的 URL。如此一來，攻擊者即可取得敏感資訊或發動進一步攻擊。

远程 Windows 主机上安装的 IBM WebSphere Portal 版本是低于 8.5.0.0 CF14 的 8.5.0，或是低于 CF14 的 9.0.0。因而会受到多个漏洞的影响：- 由于未正确验证用户提供的输入便将其返回至用户，web UI 中存在多个跨站脚本 (XSS) 漏洞。未经身份验证的远程攻击者可利用这些问题，通过特制的请求，在用户浏览器会话中执行任意脚本代码。(CVE-2017-1120, CVE-2017-1217) - 由于未正确验证用户提供的输入，因而存在跨站重定向漏洞。未经身份验证的远程攻击者可利用此问题，诱使用户跟踪特制的链接，从预期信任网站将受信任用户重定向至攻击者所选、随后可用作发动进一步攻击的任意网站。(CVE-2017-1156) - 处理 VSDX 文件中的 PageHeight 和 PageWidth 值时，Outside In Filters 子组件中存在释放后使用错误。未经身份验证的远程攻击者可利用此问题取消引用已经释放的内存，从而导致执行任意代码。(CVE-2017-3266) - Outside In Filters 子组件中存在多个不明缺陷，允许未经身份验证的远程攻击者造成拒绝服务情况。(CVE-2017-3267, CVE-2017-3268, CVE-2017-3270) - Outside In Filters 子组件中存在多个不明缺陷，允许未经身份验证的远程攻击者影响机密性、完整性和可用性。(CVE-2017-3269, CVE-2017-3271, CVE-2017-3293) - 分析目录字典中的 /Pages 密钥时，Outside In Filters 子组件中存在拒绝服务漏洞，尤其是 vspdf.dll 库的内容访问功能中。未经身份验证的远程攻击者可利用此问题，通过特制的 PDF 文件，使链接至库的应用程序崩溃。(CVE-2017-3294) - 分析 PDF 文件的 /CalRGB 元素中的 /Matrix 条目时，Outside In Filters 子组件中存在拒绝访问漏洞，尤其是 vspdf.dll 库的内容访问功能中。未经身份验证的远程攻击者可利用此漏铜，通过触发无效读取的特制 PDF 文件，使链接至库的应用程序崩溃。(CVE-2017-3295)

ID	Name	Product	Family	Published	Updated	Severity
99236	IBM WebSphere Portal 8.5.0 < 8.5.0 CF14 / 9.0.0 < 9.0.0 CF14 Multiple Vulnerabilities	Nessus	Windows	7/3/2017	11/12/2019	high
100222	IBM WebSphere Portal Cross-Site Redirection	Nessus	CGI abuses	5/16/2017	11/13/2019	high
99236	IBM WebSphere Portal 8.5.0 < 8.5.0 CF14/9.0.0 < 9.0.0 CF14の複数の脆弱性	Nessus	Windows	7/3/2017	11/12/2019	high
100222	IBM WebSphere Portalのクロスサイトリダイレクト	Nessus	CGI abuses	5/16/2017	11/13/2019	high
99236	IBM WebSphere Portal 8.5.0 < 8.5.0 CF14 / 9.0.0 < 9.0.0 CF14 多個弱點	Nessus	Windows	7/3/2017	11/12/2019	high
100222	IBM WebSphere Portal 跨站重定向	Nessus	CGI abuses	5/16/2017	11/13/2019	high
100222	IBM WebSphere Portal 跨網站重新導向	Nessus	CGI abuses	5/16/2017	11/13/2019	high
99236	IBM WebSphere Portal 8.5.0 < 8.5.0 CF14 / 9.0.0 < 9.0.0 CF14 多个漏洞	Nessus	Windows	7/3/2017	11/12/2019	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high