Unscored CVE-2013-2967 EUVD-2013-2906GHSA-vgq3-fq3v-gqc3

Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 b…

Published Aug 21, 2013 · Updated Aug 6, 2024 · Assigned by ibm

Description

Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21644047
was-cve20132967-xss(83871) vdb-entry
PM78614 vendor-advisory