Unscored CVE-2009-4152 EUVD-2009-4122GHSA-jpmv-mxhm-c9cm

Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attacker…

Published Dec 2, 2009 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.

References

PK93429 vendor-advisory
ADV-2009-3367 vdb-entry
37159 vdb-entry
http://www-01.ibm.com/support/docview.wss?uid=swg27014411
37526 third-party-advisory