IBM WebSphere Portal XSS Vulnerability (CVE-2018-1660)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid117937; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/01"; scriptcveid"CVE-2018-1660";...

CVE-2018-1660

IBM WebSphere Portal versions 7.0, 8.0, 8.5, and 9.0 are affected by a cross-site scripting vulnerability (CVE-2018-1660) that allows embedding arbitrary JavaScript in the Web UI and may lead to credentials disclosure within a trusted session. Root cause: XSS in the portal’s Web UI. Impact: poten...