Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URI that is included in an error response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM WebSphere MQ WMQ Telemetry 跨站脚本漏洞
Vulnerability Description
IBM WebSphere MQ是美国IBM公司的一款消息传递中间件产品。该产品主要为面向服务的体系结构（SOA）提供可靠的、经过验证的消息传递主干网。 IBM WebSphere MQ 8.0版本和8.0.0.1版本的WMQ Telemetry中的MQ XR WebSockets Listener存在跨站脚本漏洞，该漏洞源于程序没有充分验证用户提交的输入。远程攻击者可借助错误响应中特制的URI利用该漏洞注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A