Description
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- was-admin-cons-xss(62947) vdb-entry
- 42136 third-party-advisory
- PM14251 vendor-advisory
- 41722 third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27004980
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- 69007 vdb-entry
- 1024686 vdb-entry