Not rated
CVE-2017-1121 IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting
Description
IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997743
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere Application Server | 9.0 | No fix stated |
| WebSphere Application Server | 8.5 | No fix stated |
| WebSphere Application Server | 8.0.0 | No fix stated |
| WebSphere Application Server | 7.0.0 | No fix stated |
Other CVEs of WebSphere Application Server
The 4 CVEs of WebSphere Application Server →
CVE-2017-1137
IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security
Not rated
CVE-2017-1151
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust…
Not rated
CVE-2016-8919
IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from…
Not rated