Unscored CVE-2013-4004 EUVD-2013-3935GHSA-cg36-m866-gwjh

Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.7 and 8.5…

Published Aug 21, 2013 · Updated Aug 6, 2024 · Assigned by ibm

Description

Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.7 and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

was-cve20134004-xss(85268) vdb-entry
http://www-01.ibm.com/support/docview.wss?uid=swg21644047
PM81571 vendor-advisory
61935 vdb-entry