IBM WebSphere Portal XSS Vulnerability

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108488; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/08"; scriptcveid"CVE-2018-1401";...

CVE-2018-1401

IBM WebSphere Portal versions 8.0, 8.5, and 9.0 are affected by a cross-site scripting (XSS) vulnerability. The issue allows embedding arbitrary JavaScript in the Web UI, potentially enabling credential disclosure within a trusted session. The vulnerability is documented as CVE-2018-1401; vendor ...