Lucene search

IBM1BE841CCE9668CF939D2D8ABC2CDB202D3C68CD32FFA94F04255508442C5F151

HistoryJul 19, 2023 - 4:25 a.m.

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to cross-site scripting in the Admin Console (CVE-2023-26283)

2023-07-1904:25:20

www.ibm.com

ibm

websphere application server

cross-site scripting

admin console

jazz for service management

cve-2023-26283

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.0%

JSON

Summary

IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console. This has been addressed in the remediation section.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
Jazz for Service Management	1.1.3

Remediation/Fixes

Principal Product and Version(s)	Affected Supporting Product and Version	Affected Supporting Product Security Bulletin
Jazz for Service Management version 1.1.3.7 - 1.1.3.18	Websphere Application Server Full Profile 9.0	Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2023-26283)
Jazz for Service Management version 1.1.3- 1.1.3.14

Websphere Application Server Full Profile 8.5.5

| Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2023-26283)

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmjazz_for_service_managementMatch1.1.3.

VendorProductVersionCPE
ibmjazz_for_service_management1.1.3.cpe:2.3:a:ibm:jazz_for_service_management:1.1.3.:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	jazz_for_service_management	1.1.3.	cpe:2.3:a:ibm:jazz_for_service_management:1.1.3.:::::::*