IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting

Summary

Product

Vulnerabilities 1

• Medium 5.4
  CVE-2022-40750

  IBM WebSphere Application Server cross-site scripting

  IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…

  IBM WebSphere Application Server
  Nov 11, 2022

Revision history

1. 2023-06-05 #5

   Neue Updates von HCL aufgenommen

2. 2023-01-09 #4

   Neue Updates von IBM aufgenommen

3. 2022-12-22 #3

   Neue Updates von IBM aufgenommen

4. 2022-12-04 #2

   Neue Updates von IBM aufgenommen

5. 2022-11-01 #1

   Initiale Fassung

References

• HCL Article KB0104902 vom 2023-06-05
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104902
• IBM Security Bulletin: 6833552 vom 2022-11-01
  https://www.ibm.com/support/pages/node/6833552
• IBM Security Bulletin 6610583 vom 2022-12-03
  https://www.ibm.com/blogs/psirt/security-bulletin-a-security-vulnerability-has-been-identified-in-ibm-websphere-application-server-shipped-with-tivoli-netcool-omnibus-webgui-cve-2022-40750/
• IBM Security Bulletin 6848279 vom 2022-12-23
  https://www.ibm.com/support/pages/node/6848279
• IBM Security Bulletin 6853679 vom 2023-01-09
  https://www.ibm.com/support/pages/node/6853679