Description
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 41722 third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27004980
- ADV-2010-2595 vdb-entry
- 43874 vdb-entry
- was-admins-console-xss(62948) vdb-entry
- PM23872 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- PM17046 vendor-advisory