CVE-2011-2754

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-07-17 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

IBM Web Content Manager: all versions
IBM WebSphere Portal: 7.0.0.0, 7.0.0.1, 7.0.0.1-cf002, 7.0.0.1-cf003, 7.0.0.1-cf004, 7.0.0.1-cf005

References

http://secunia.com/advisories/45106
http://www.ibm.com/support/docview.wss?uid=swg21503959
http://secunia.com/advisories/45106
http://www.ibm.com/support/docview.wss?uid=swg21503959

Get alerted when CVE-2011-2754 or the next vulnerability affects your stack