CVE-2012-3293 in WebSphere Application Server

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a cross-frame scripting (XFS) issue.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2012-06-07

Divulgación

2012-08-21

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
5915	IBM WebSphere Application Server secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2012-3293

Fuentes

• MITRE
• NVD
• CVE Details