CVE-2011-2172: XSS

Published May 26, 2011

Updated

Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

3 affected components

IBM WebSphere Portal=7.0.0.1

IBM WebSphere Portal=7.0.0.1-cf003

IBM WebSphere Portal=7.0.0.1-cf002

Event History

May 26, 2011

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2172?

CVE-2011-2172 is considered a moderate severity vulnerability due to its potential for exploitation through cross-site scripting.

How do I fix CVE-2011-2172?

To fix CVE-2011-2172, apply the latest patches or updates provided by IBM for WebSphere Portal versions 7.0.0.1 and any related fix packs.

What systems are affected by CVE-2011-2172?

CVE-2011-2172 affects IBM WebSphere Portal version 7.0.0.1 and specific fix pack versions prior to CF004.

What type of vulnerability is CVE-2011-2172?

CVE-2011-2172 is a cross-site scripting (XSS) vulnerability that allows injection of arbitrary web scripts or HTML.

Can CVE-2011-2172 lead to data breaches?

Yes, CVE-2011-2172 can potentially lead to data breaches if an attacker successfully executes malicious scripts.