1892 matches found
CVE-2016-3042
CVE-2016-3042 affects IBM WebSphere Application Server Liberty (OpenID Connect clients) and is a cross-site scripting vulnerability that could allow arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. IBM bulletins confirm the vulnerability ...
CVE-2016-3042
Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Application Server WAS Liberty before 16.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving OpenID Connect clients...
IBM WebSphere Application Server Liberty Code Injection Vulnerability (swg21978293)
IBM WebSphere Application Server Liberty is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
The vulnerability of WebSphere Application Server application servers allows attackers to inject arbitrary Web or HTML code.
The vulnerability of the OpenID Connect client-side web application server provided by WebSphere Application Server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using ...
IBM WAS Liberty Profile OIDC Cross-Site Scripting Vulnerability
The IBM WebSphere Application Server WAS Liberty Profile is a dynamically assembled application server profile. A cross-site scripting vulnerability exists in IBM WebSphere Application Server WAS Liberty Profile versions prior to 8.5.5.9, OIDC Client Web Application, which can be exploited by...
CVE-2016-0283
Cross-site scripting XSS vulnerability in the OpenID Connect OIDC client web application in IBM WebSphere Application Server WAS Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0283
Cross-site scripting XSS vulnerability in the OpenID Connect OIDC client web application in IBM WebSphere Application Server WAS Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in the OpenID Connect OIDC client web application in IBM WebSphere Application Server WAS Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0283
Cross-site scripting XSS vulnerability in the OpenID Connect OIDC client web application in IBM WebSphere Application Server WAS Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0283
CVE-2016-0283 affects IBM WebSphere Application Server Liberty Profile 8.5.5 before 8.5.5.9. The OpenID Connect (OIDC) client web application is vulnerable to cross-site scripting (XSS) via a crafted URL, enabling a remote attacker to inject web script or HTML in the victim’s browser. Impact per ...
CVE-2014-6164
IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect cookies, and consequently obtain sensitive information, via a crafted URL...
