CVE-2025-12635 in WebSphere Application Server
Сводка (Английский)
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are affected by cross-site scripting due to improper validation of user-supplied input. An attacker could exploit this vulnerability by using a specially crafted URL to redirect the user to a malicious site.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Ответственный
ibm
Резервировать
03.11.2025
Раскрытие
09.12.2025
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 334997 | IBM WebSphere Application Server URL межсайтовый скриптинг | 79 | Не определено | Официальное исправление | CVE-2025-12635 |