CVE-2015-1917: XSS
First published: Tue Jul 14 2015(Updated: )
Cross-site scripting (XSS) vulnerability in the Active Content Filtering component in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere Portal | =6.1.0.0 | |
| IBM WebSphere Portal | =6.1.0.1 | |
| IBM WebSphere Portal | =6.1.0.2 | |
| IBM WebSphere Portal | =6.1.0.3 | |
| IBM WebSphere Portal | =6.1.0.4 | |
| IBM WebSphere Portal | =6.1.0.5 | |
| IBM WebSphere Portal | =6.1.0.6 | |
| IBM WebSphere Portal | =6.1.5.0 | |
| IBM WebSphere Portal | =6.1.5.1 | |
| IBM WebSphere Portal | =6.1.5.2 | |
| IBM WebSphere Portal | =6.1.5.3 | |
| IBM WebSphere Portal | =7.0.0.0 | |
| IBM WebSphere Portal | =7.0.0.1 | |
| IBM WebSphere Portal | =7.0.0.2 | |
| IBM WebSphere Portal | =8.0.0.0 | |
| IBM WebSphere Portal | =8.0.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-1917?
CVE-2015-1917 is classified with a medium severity level, indicating a moderate risk to affected systems.
How do I fix CVE-2015-1917?
To mitigate CVE-2015-1917, apply the latest patches and updates provided by IBM for affected versions of WebSphere Portal.
What software is affected by CVE-2015-1917?
CVE-2015-1917 affects multiple versions of IBM WebSphere Portal, specifically versions 6.1.0 through 6.1.0.6, 6.1.5 through 6.1.5.3, 7.0.0 through 7.0.0.2, 8.0.0 before 8.0.0.1, and 8.5.0 before CF06.
What kind of vulnerability is CVE-2015-1917?
CVE-2015-1917 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts.
Can CVE-2015-1917 be exploited remotely?
Yes, CVE-2015-1917 can be exploited by remote attackers, making it crucial for affected users to address the vulnerability promptly.
- agent/author
- agent/severity
- agent/references
- agent/type
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- agent/tags
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- vendor/ibm
- canonical/ibm websphere portal
- version/ibm websphere portal/6.1.0.0
- version/ibm websphere portal/6.1.0.1
- version/ibm websphere portal/6.1.0.2
- version/ibm websphere portal/6.1.0.3
- version/ibm websphere portal/6.1.0.4
- version/ibm websphere portal/6.1.0.5
- version/ibm websphere portal/6.1.0.6
- version/ibm websphere portal/6.1.5.0
- version/ibm websphere portal/6.1.5.1
- version/ibm websphere portal/6.1.5.2
- version/ibm websphere portal/6.1.5.3
- version/ibm websphere portal/7.0.0.0
- version/ibm websphere portal/7.0.0.1
- version/ibm websphere portal/7.0.0.2
- version/ibm websphere portal/8.0.0.0
- version/ibm websphere portal/8.0.0.1