Cross site scripting

2018-10-2412:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.3%

JSON

IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142596.

CPENameOperatorVersion
websphere_commerceeq7.0.0.9
websphere_commercege9.0.0.0
websphere_commercele9.0.0.6
websphere_commercege8.0.3.0
websphere_commercele8.0.3.6
websphere_commercege8.0.1.0
websphere_commercele8.0.1.13
websphere_commercege8.0.0.0
websphere_commercele8.0.0.19
websphere_commercege8.0.4.0

Name	Operator	Version
websphere_commerce	eq	7.0.0.9
websphere_commerce	ge	9.0.0.0
websphere_commerce	le	9.0.0.6
websphere_commerce	ge	8.0.3.0
websphere_commerce	le	8.0.3.6
websphere_commerce	ge	8.0.1.0
websphere_commerce	le	8.0.1.13
websphere_commerce	ge	8.0.0.0
websphere_commerce	le	8.0.0.19
websphere_commerce	ge	8.0.4.0