CVE-2017-1380

CVE-2017-1380 is a cross-site scripting vulnerability in the Admin Console of IBM WebSphere Application Server (WAS). The initial description states WAS 7.0, 8.0, 8.5 and 9.0 are affected and that arbitrary JavaScript could be embedded in the Web UI, potentially leading to credential disclosure w...

CVE-2017-1380

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...