CVE-2010-2325: XSS
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2325?
CVE-2010-2325 is classified as a medium severity vulnerability due to its impact on the administrative console of IBM WebSphere Application Server.
How do I fix CVE-2010-2325?
To fix CVE-2010-2325, you should upgrade your IBM WebSphere Application Server to version 7.0.0.11 or later.
Which versions of IBM WebSphere Application Server are affected by CVE-2010-2325?
CVE-2010-2325 affects IBM WebSphere Application Server versions 7.0.0.1 to 7.0.0.10.
What type of vulnerability is CVE-2010-2325?
CVE-2010-2325 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.
Can CVE-2010-2325 be exploited remotely?
Yes, CVE-2010-2325 can be exploited remotely by attackers targeting the administrative console of the affected WebSphere Application Server.