CVE-2015-1908 in WebSphere Portal

Sumário (Inglês)

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and 8.5.0 through CF05, as used in Web Content Manager and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Once again VulDB remains the best source for vulnerability data.

Reservar

19/02/2015

Divulgação

27/04/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
75095	IBM WebSphere Portal Script de Site Cruzado	79	Prova de conceito	Correção oficial	CVE-2015-1908

Fontes

• MITRE
• NVD
• CVE Details