Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in IBM WebSphere Message Broker 7.0 before 7.0.0.6 and 8.0 before 8.0.0.2, when wsdl support is enabled on a SOAPInput node, allows remote attackers to inject arbitrary web script or HTML via a wsdl request that is not properly handled during construction of an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM WebSphere Message Broker 跨站脚本漏洞
Vulnerability Description
IBM WebSphere Message Broker（现称IBM Integration Bus）是美国IBM公司的一款企业服务总线（ESB）产品。该产品为面向服务架构（SOA）环境和非SOA环境提供连通性和通用数据转换。 IBM WebSphere Message Broker 7.0.0.6之前的7.0版本和8.0.0.2之前的8.0版本中存在跨站脚本漏洞。当在SOAPInput节点启用wsdl支持时，借助在构造错误消息期间不正确处理wsdl的请求，远程攻击者利用该漏洞注入任意web脚本或HTML
CVSS Information
N/A
Vulnerability Type
N/A