Description
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF29, 8.0.0.x before 8.0.0.1 CF15, and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
References
- PI30620 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21694738
- ibm-wsportal-cve20148909-xss(99250) vdb-entry