CVE-2017-1303: XSS

Published Jul 31, 2017

Updated

IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125457.

Affected Software

4 affected components

IBM WebSphere Portal=7.0

IBM WebSphere Portal=8.0

IBM WebSphere Portal=8.5

IBM WebSphere Portal=9.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22004979

Event History

Jul 31, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Data Sourced

via NVD·09:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-1303?

CVE-2017-1303 is considered a high severity vulnerability due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2017-1303?

To fix CVE-2017-1303, upgrade affected versions of IBM WebSphere Portal and Web Content Manager to the latest patch release provided by IBM.

Which versions of IBM WebSphere Portal are affected by CVE-2017-1303?

CVE-2017-1303 affects IBM WebSphere Portal versions 7.0, 8.0, 8.5, and 9.0.

What kind of attack does CVE-2017-1303 facilitate?

CVE-2017-1303 facilitates cross-site scripting attacks, allowing the execution of arbitrary JavaScript code.

What are the potential impacts of CVE-2017-1303?

The potential impacts of CVE-2017-1303 include credential disclosure and alteration of the user interface functionality.