Cross site scripting

2023-04-2714:15:00

PRIOn knowledge base

www.prio-n.com

ibm

websphere

application server

cross-site scripting

vulnerability

javascript

web ui

credentials disclosure

trusted session

nvd

x-force

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246904.

CPENameOperatorVersion
websphere_application_serverge8.5.0.0
websphere_application_serverlt8.5.5.24
websphere_application_serverge9.0.0.0
websphere_application_serverlt9.0.5.16

Name	Operator	Version
websphere_application_server	ge	8.5.0.0
websphere_application_server	lt	8.5.5.24
websphere_application_server	ge	9.0.0.0
websphere_application_server	lt	9.0.5.16