Description
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, and 8.0.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
References
- ibm-wesphere-cve20140953-xss(92626) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21680230
- PI16127 vendor-advisory
- 1030669 vdb-entry