CVE-2013-5379 in WebSphere Portal
摘要 (英语)
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging improper tagging functionality.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
预定
2013-08-22
披露
2013-11-13
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 11171 | IBM WebSphere Portal Reflected 跨网站脚本 | 79 | 高 | 官方修复 | CVE-2013-5379 |