4.7
Moyenne
CVE-2024-27270 IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting
Description
IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WebSphere Application Server Liberty 23.0 | 23.0.0.3 → 24.0.0.3 | Pas de correctif indiqué |
Autres CVE de WebSphere Application Server Liberty
Les 30 CVE de WebSphere Application Server Liberty →
CVE-2026-1561
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is…
5.4
Moyenne
CVE-2025-14914
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive…
7.6
Élevée
CVE-2025-12635
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are…
5.4
Moyenne
CVE-2025-36047
IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by…
5.3
Moyenne