CVE-2015-7413: XSS

Published Dec 21, 2015

Updated

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF19 and 8.5.0 through CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected Software

3 affected components

IBM WebSphere Portal=8.0.0.0

IBM WebSphere Portal=8.0.0.1

IBM WebSphere Portal=8.5.0.0

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21970176

Event History

Dec 21, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7413?

CVE-2015-7413 is categorized as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2015-7413?

To fix CVE-2015-7413, upgrade IBM WebSphere Portal to version 8.0.0.1 CF19 or later, or 8.5.0 through CF08 or later.

Who is affected by CVE-2015-7413?

CVE-2015-7413 affects users of IBM WebSphere Portal versions 8.0.0.0, 8.0.0.1, and 8.5.0.0.

What type of attack is possible with CVE-2015-7413?

CVE-2015-7413 allows remote attackers to perform cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML.

What are the potential consequences of CVE-2015-7413?

Exploitation of CVE-2015-7413 could lead to unauthorized access to user sessions, exposure of sensitive data, and defacement of web pages.