EUVD-2020-25822

Malware in sbrugna...

CVE-2020-4575

IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured...

CVE-2020-4575: Improper Neutralization of Input During Web Page Generation

IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured...

PT-2020-18142

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server ND versions 8.5 through 9.0 IBM WebSphere Virtual Enterprise versions 7.0 through 8.0 Description The issue is related to cross-site scripting. It occurs when the High Availability Deployment Manager is...

PT-2015-5508

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.38 IBM WebSphere Application Server versions 8.0.x through 8.0.0.10 IBM WebSphere Application Server versions 8.5.x through 8.5.5.6 IBM WebSphere Virtual Enterprise version 7.0.0.6 an...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-5425

IBM WebSphere Virtual Enterprise CVE-2013-5425 is an XSS vulnerability in the Administration Console exploitable by remote authenticated users via a crafted URL. Affected versions: VE 6.1 prior to 6.1.1.6 and VE 7.0 prior to 7.0.0.4. Mitigation: apply theFix Pack/Interim Fix PM93828. For VE 7.0, ...

PT-2013-5536

Name of the Vulnerable Software and Affected Versions IBM WebSphere Virtual Enterprise versions 6.1 through 6.1.1.6 IBM WebSphere Virtual Enterprise versions 7.0 through 7.0.0.4 Description A cross-site scripting XSS issue exists in the Administration Console, allowing remote authenticated users ...

CVE-2013-5425: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...