XSS in IBM Websphere Portal
CVE-2013-5378
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (57.5th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_portal — versions 8.0.0.0, 8.0.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)