CVE-2013-0466 in WebSphere Message Broker
Сводка (Английский)
Cross-site scripting (XSS) vulnerability in IBM WebSphere Message Broker 7.0 before 7.0.0.6 and 8.0 before 8.0.0.2, when wsdl support is enabled on a SOAPInput node, allows remote attackers to inject arbitrary web script or HTML via a wsdl request that is not properly handled during construction of an error message.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Резервировать
16.12.2012
Раскрытие
20.02.2013
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 7704 | IBM WebSphere Message Broker SOAPInput Node WSDL File Requests межсайтовый скриптинг | 79 | Высокий | Официальное исправление | CVE-2013-0466 |