IBM WebSphere Application Server跨站脚本漏洞

IBM WebSphere Application Server (WAS) is an application server product from IBM of the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform.IBM WebSphere Application Server versions 8.5 and 9.0 have a cross-site scripting vulnerability that stems from the program’s lack of data validation filtering of user-supplied data and output. An attacker could use the vulnerability to execute JavaScript code on the client side.