Unscored CVE-2014-8902 EUVD-2014-8729GHSA-rp36-q245-xwrh

Cross-site scripting (XSS) vulnerability in the Blog Portlet in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27…

Published Dec 19, 2014 · Updated Aug 6, 2024 · Assigned by ibm

Description

Cross-site scripting (XSS) vulnerability in the Blog Portlet in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF04 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References

ibm-wsportal-cve20148902-xss(99150) vdb-entry
http://www-01.ibm.com/support/docview.wss?uid=swg21692107
PI29956 vendor-advisory