CVE-2018-1361

IBM WebSphere Portal 8.5 and 9.0 are affected by a cross-site scripting (XSS) vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure in a trusted session. Public details indicate affected versions include 8.5.0.x before CF15 and 9.0.0...