PT-2013-2385

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower SOA appliances versions 3.8.2 through 5.0.0 Description A cross-site scripting XSS issue exists in the echo functionality, allowing remote attackers to inject arbitrary web script or HTML via a SOAP message. This affect...

CVE-2013-0499: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...