IBM WebSphere Portal 'boot_config.jsp' XSS (PI16041)

The version of IBM WebSphere Portal on the remote host is affected by a cross-site scripting vulnerability in the 'bootconfig.jsp' script due to improper user input validation. An attacker could exploit this issue to execute code in the security context of a user's browser to steal authentication...

CVE-2014-0952

CVE-2014-0952 is a cross-site scripting (XSS) vulnerability in IBM WebSphere Portal where boot_config.jsp accepts unsanitized input. Affected versions include WebSphere Portal 6.1.0.x up to 6.1.0.6 CF27, 6.1.5 up to 6.1.5.3 CF28, 7.0 up to 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12. An attacker ca...