Medium · 4.4 CVE-2025-33104 EUVD-2025-14903GHSA-c644-3mgg-w2j9

IBM WebSphere Application Server cross

Published May 14, 2025 · Updated Aug 20, 2025 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server	8.5, 9.0	—

Advisories 1

WID-SEC-2025-1051 IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Aug 17, 2025

References

https://www.ibm.com/support/pages/node/7233438 vendor-advisory patch