Lucene search

Security Bulletin: Cross-site scripting vulnerability in Admin Console for WebSphere Application Server (CVE-2017-1380)

🗓️ 15 Jun 2018 07:40:07Reported by IBMType

ibm🔗 www.ibm.com👁 18 Views

Cross-site scripting vulnerability in Admin Console for WebSphere Application Server (CVE-2017-1380). Vulnerable to arbitrary JavaScript code injection, potentially leading to credentials disclosure. Versions affected: 9.0, 8.5, 8.0, 7.0. Apply interim fix or upgrade to minimal fix pack levels as per the provided links for each version

Reporter	Title	Published	Views	Family All 47
Tenable Nessus	IBM WebSphere Application Server 7.0 < 7.0.0.45 / 8.0 < 8.0.0.14 / 8.5 < 8.5.5.12 / 9.0 < 9.0.0.5 Unspecified XSS (PI82078)	4 Aug 201700:00	–	nessus
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Application Server affects multiple IBM Rational products based on IBM Jazz technology (CVE-2017-1380)	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool Impact (CVE-2017-1380)	17 Jun 201815:46	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-site scripting vulnerability in Admin Console for WebSphere Application Server shipped with Jazz for Service Management (CVE-2017-1380)	17 Jun 201815:47	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition (CVE-2017-1380)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-site scripting vulnerability in Admin Console for WebSphere Application Server (CVE-2017-1380) may affect IBM Tivoli Netcool Configuration Manager (ITNCM)	17 Jun 201815:44	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2017-1380)	29 Sep 201820:24	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2017-1380)	15 Jun 201823:48	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2017-1380)	16 Jun 201822:01	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1380)	15 Jun 201807:07	–	ibm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Jun 2018 07:07Current

0.8Low risk

Vulners AI Score0.8

EPSS0.00116