CVE-2011-0679 json
IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal,…
published 2011-01-28 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-0697
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.8%
- EPSS 3.8% chance of exploitation in 30 days, percentile 90%
- public exploits
- 0
- none known
Summary
IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal, allows remote attackers to obtain sensitive information via a "modified message."
Exploit prediction
3.84% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM25698
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM24319
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM24320
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM26397
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM25191
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM22167
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM22159
vendor-advisory
-
secunia.com
/advisories/43081
third-party-advisory, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/64890
vdb-entry
-
vupen.com
/english/advisories/2011/0223
vdb-entry
-
kb.cert.org
/vuls/id/375127
third-party-advisory, us-government-resource
-
osvdb.org
/70688
vdb-entry
- ibm.com /support/docview.wss?uid=swg21460422
-
securityfocus.com
/bid/45989
vdb-entry
Sources
- CVE List CVE-2011-0679
- NVD CVE-2011-0679
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.