CVE-2011-2754

no score yetEPSS 0.8%

Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2011-07-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:web_content_manager
ibm:websphere_portal

References

http://secunia.com/advisories/45106
http://www.ibm.com/support/docview.wss?uid=swg21503959
http://secunia.com/advisories/45106
http://www.ibm.com/support/docview.wss?uid=swg21503959

Check your stack JSON