Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2, when login security is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM WebSphere Application 跨站脚本漏洞
Vulnerability Description
IBM WebSphere Application Server（WAS）是美国IBM公司开发并发行的一款应用服务器产品，它是Java EE和Web服务应用程序的平台，也是IBM WebSphere软件平台的基础。 IBM WebSphere Application Server 6.1.0至6.1.0.45版本以及7.0至7.0.0.25版本中存在跨站脚本漏洞，该漏洞源于返回用户之前程序没有正确验证虚拟成员管理器(VMM)中有关管理员角色的未明输入。攻击者利用该漏洞在受影响站点上下文中用户浏览器会话中执
CVSS Information
N/A
Vulnerability Type
N/A