CVE-2009-0855: XSS

Published Mar 9, 2009

Updated

Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

25 affected components

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.21

IBM WebSphere Application Server Feature Pack for Web Services=6.1

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.22

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.19

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.2

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.4

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.11

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.14

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.20

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.9

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.0

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.1

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.7

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.3

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.17

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.13

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.16

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.6

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.10

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.8

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.15

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.18

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.5

IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.12

Event History

Mar 9, 2009

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0855?

CVE-2009-0855 is considered to have a medium severity rating due to the potential for cross-site scripting attacks in IBM WebSphere Application Server.

How do I fix CVE-2009-0855?

To fix CVE-2009-0855, you should upgrade to IBM WebSphere Application Server version 6.1.0.23 or later.

What systems are affected by CVE-2009-0855?

CVE-2009-0855 affects multiple versions of IBM WebSphere Application Server 6.1, particularly those prior to version 6.1.0.23.

What type of vulnerability is CVE-2009-0855?

CVE-2009-0855 is categorized as a cross-site scripting (XSS) vulnerability.

Can CVE-2009-0855 lead to data breaches?

Yes, CVE-2009-0855 can potentially allow attackers to inject malicious scripts, which may lead to unauthorized access to sensitive information.