# CVEs published 2016-02-29

12 CVEs were published on February 29, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7428](https://cve.now/CVE-2015-7428.md): Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redir (no CVSS)
- [CVE-2015-7455](https://cve.now/CVE-2015-7455.md): IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content it (no CVSS)
- [CVE-2015-7457](https://cve.now/CVE-2015-7457.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attac (no CVSS)
- [CVE-2015-7491](https://cve.now/CVE-2015-7491.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote authe (no CVSS)
- [CVE-2015-8524](https://cve.now/CVE-2015-8524.md): Cross-site scripting (XSS) vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, (no CVSS)
- [CVE-2016-0212](https://cve.now/CVE-2016-0212.md): Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial (no CVSS)
- [CVE-2016-0213](https://cve.now/CVE-2016-0213.md): Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial (no CVSS)
- [CVE-2016-0216](https://cve.now/CVE-2016-0216.md): Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial (no CVSS)
- [CVE-2016-0225](https://cve.now/CVE-2016-0225.md): IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.9 allows remote authenticated Commerce Accelerator administrators to obtai (no CVSS)
- [CVE-2016-0243](https://cve.now/CVE-2016-0243.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0 (no CVSS)
- [CVE-2016-0244](https://cve.now/CVE-2016-0244.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0 (no CVSS)
- [CVE-2016-0245](https://cve.now/CVE-2016-0245.md): The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.