CVE-2013-5379 in WebSphere Portal
Summary
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging improper tagging functionality.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
08/22/2013
Disclosure
11/13/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11171 | IBM WebSphere Portal Reflected cross site scripting | 79 | High | Official fix | CVE-2013-5379 |