CVE-2012-3293 in WebSphere Application Server
Résumé (Anglaise)
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a cross-frame scripting (XFS) issue.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Réserver
07/06/2012
Divulgation
21/08/2012
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 5915 | IBM WebSphere Application Server cross site scripting | 79 | Non défini | Correctif officiel | CVE-2012-3293 |