Description
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."
References
- ADV-2010-1411 vdb-entry
- PM15830 vendor-advisory
- 40096 third-party-advisory
- PM11778 vendor-advisory