Skip to content
OpenAdvisories
Unscored CVE-2016-0283 EUVD-2016-0318GHSA-8qvq-m6fq-4488

Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Libe…

Published Mar 19, 2016 · Updated Aug 5, 2024 · Assigned by ibm

Description

Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References