Lucene search

CVE-2020-4303

🗓️ 02 Apr 2020 15:17:15Reported by ibmType

IBM WebSphere App Server - Liberty 17.0.0.3 to 20.0.0.3 XSS vuln, allows JS code embed in Web UI

Reporter	Title	Published	Views	Family All 27
Cvelist	CVE-2020-4303	2 Apr 202014:20	–	cvelist
NVD	CVE-2020-4303	2 Apr 202015:15	–	nvd
Prion	Cross site scripting	2 Apr 202015:15	–	prion
IBM Security Bulletins	Security Bulletin: A security vulnerabilities has been identified in WebSphere Liberty Profile shipped with IBM License Metric Tool v9 .	30 Jun 202008:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products	14 Sep 202215:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Network Deployment security vulnerabilities in IBM Content Foundation on Cloud	10 Nov 202022:47	–	ibm
IBM Security Bulletins	Security Bulletin: Websphere Application Server Liberty vulnerabilities used by IBM Streams	22 Jul 202021:00	–	ibm
IBM Security Bulletins	Security Bulletin: Speech to Text, Text to Speech ICP, WebSphere Application Server Liberty Fix	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server Liberty is vulnerable to Cross-site Scripting that affects Liberty for Java for IBM Cloud (CVE-2020-4303, CVE-2020-4304)	7 Oct 202216:01	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server Liberty is vulnerable to Cross-site Scripting (CVE-2020-4303, CVE-2020-4304)	2 Jun 202021:22	–	ibm

Nvd

Vulners

Node

ibm websphere_application_serverRange17.0.0.3–20.0.0.3liberty

[
  {
    "product": "WebSphere Application Server Liberty",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3"
      },
      {
        "status": "affected",
        "version": "20.0.0.3"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6147195
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/176668

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Apr 2020 15:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS24.3

CVSS36.1

EPSS0.001

CWE-79