CVE-2015-0139: XSS

Published Mar 13, 2015

Updated

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected Software

3 affected components

IBM WebSphere Portal=8.0.0.0

IBM WebSphere Portal=8.0.0.1

IBM WebSphere Portal=8.5.0.0

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21697213

Event History

Mar 13, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0139?

CVE-2015-0139 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2015-0139?

To fix CVE-2015-0139, upgrade IBM WebSphere Portal to the latest version that includes the necessary patches.

Who is affected by CVE-2015-0139?

CVE-2015-0139 affects remote authenticated users of IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05.

What type of vulnerability is CVE-2015-0139?

CVE-2015-0139 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.

What are the potential impacts of CVE-2015-0139?

The potential impacts of CVE-2015-0139 include unauthorized access to user information and the execution of malicious scripts in a user's browser.