Security Bulletin:A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2016-0283)

Summary

There is a cross-site scripting vulnerability in WebSphere Application Server Liberty when using the OpenID Connect (OIDC) client.

Vulnerability Details

Please consult the security bulletin

• Security Bulletin: Cross-site scripting vulnerability in the OpenID Connect client web application (CVE-2016-0283)
  for vulnerability details and information about fixes.

Affected Products and Versions

This vulnerability affects the following versions and releases of IBM WebSphere Application Server

• Version 8.5.5 Liberty Profile

Workarounds and Mitigations

none