Lucene search

IBM3914BBF8A4DD5EECC80B9E573E18C4C318F819BF14FABC8AC1C7F4AD2609B787

HistoryJul 01, 2024 - 10:27 a.m.

Security Bulletin: Vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2024-35153)

2024-07-0110:27:49

www.ibm.com

websphere service registry

cross-site scripting

vulnerability

ibm

8.5

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

Percentile

13.2%

JSON

Summary

WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about a cross-site scripting vulnerability affecting WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
WebSphere Service Registry and Repository	8.5

Remediation/Fixes

For WebSphere Application Server shipped with WebSphere Service Registry and Repository refer to the following security bulletin for vulnerability details and information about fixes:

Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting (CVE-2024-35153)

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmwebsphere_service_registry_and_repositoryMatch8.5

VendorProductVersionCPE
ibmwebsphere_service_registry_and_repository8.5cpe:2.3:a:ibm:websphere_service_registry_and_repository:8.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_service_registry_and_repository	8.5	cpe:2.3:a:ibm:websphere_service_registry_and_repository:8.5:::::::*