CVE-2011-1308: XSS
Published Mar 8, 2011
·Updated
Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
139 affected components
IBM WebSphere Application Server Feature Pack for Web Services=5.0.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.21
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.31
IBM WebSphere Application Server Feature Pack for Web Services=3.0.21
IBM WebSphere Application Server Feature Pack for Web Services=6.1.7
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0.5
IBM WebSphere Application Server Feature Pack for Web Services=6.1
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.2
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.10
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.14
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.5
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.19
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.6
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.5
IBM WebSphere Application Server Feature Pack for Web Services=5.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.5
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.2
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.11
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1
IBM WebSphere Application Server Feature Pack for Web Services=3.5
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.6
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.9
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.15
IBM WebSphere Application Server Feature Pack for Web Services=5.0.1
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.4
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.33
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.11
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.25
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.3
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.13
IBM WebSphere Application Server Feature Pack for Web Services=6.1.14
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.11
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.9
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.15
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.11
IBM WebSphere Application Server Feature Pack for Web Services=7.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.28
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.13
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.8
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.11
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.6
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.12
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.10
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services=3.52
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.8
IBM WebSphere Application Server Feature Pack for Web Services=3.5.2
IBM WebSphere Application Server Feature Pack for Web Services=4.0.3
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.24
IBM WebSphere Application Server Feature Pack for Web Services=4.0.4
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.9
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.17
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.32
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.17
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.9
IBM WebSphere Application Server Feature Pack for Web Services=3.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.2
IBM WebSphere Application Server Feature Pack for Web Services<=7.0.0.13
IBM WebSphere Application Server Feature Pack for Web Services=2.0
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.17
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.30
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.29
IBM WebSphere Application Server Feature Pack for Web Services=4.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.5
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.27
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.29
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.23
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0.4
IBM WebSphere Application Server Feature Pack for Web Services=3.5.1
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.16
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.13
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.7
IBM WebSphere Application Server Feature Pack for Web Services=3.5.3
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.6
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.27
IBM WebSphere Application Server Feature Pack for Web Services=6.1.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.17
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.1
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.9
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.6
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.13
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.12
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.22
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.5
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.7
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.8
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.16
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.23
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.19
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.1
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.9
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.14
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.25
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.11
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.7
IBM WebSphere Application Server Feature Pack for Web Services=4.0.1
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.5
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.4
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.5
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.13
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.12
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.31
IBM WebSphere Application Server Feature Pack for Web Services=6.1.3
Event History
Mar 8, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1308?
CVE-2011-1308 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2011-1308?
To address CVE-2011-1308, update to a patched version of IBM WebSphere Application Server, specifically 7.0.0.15 or later.
3
What versions are affected by CVE-2011-1308?
CVE-2011-1308 affects IBM WebSphere Application Server versions 2.0 up to 7.0.0.13, except for patched versions.
4
Can CVE-2011-1308 lead to data theft?
Yes, an attacker exploiting CVE-2011-1308 could inject malicious scripts that might lead to data theft or session hijacking.
5
Is CVE-2011-1308 a common vulnerability?
CVE-2011-1308 is classified as a common vulnerability, often found in web applications using outdated WebSphere servers.