Description
Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- ADV-2009-0607 vdb-entry
- PK81212 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27006876
- 1021811 vdb-entry
- PK76720 vendor-advisory
- 34001 vdb-entry
- ADV-2009-1464 vdb-entry