CVE-2018-1361: XSS

Published Jan 11, 2018

Updated

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137158.

Affected Software

2 affected components

IBM WebSphere Portal=8.5.0.0

IBM WebSphere Portal=9.0.0.0

Remediation

Patch Available

https://www.ibm.com/support/docview.wss?uid=swg22012409

Event History

Jan 11, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1361?

CVE-2018-1361 is considered a high severity vulnerability due to its potential for cross-site scripting and credential exposure.

How do I fix CVE-2018-1361?

To fix CVE-2018-1361, upgrade to the latest version of IBM WebSphere Portal that addresses this vulnerability.

What are the affected versions in CVE-2018-1361?

CVE-2018-1361 affects IBM WebSphere Portal versions 8.5.0.0 and 9.0.0.0.

What type of attack does CVE-2018-1361 enable?

CVE-2018-1361 enables cross-site scripting attacks that can lead to unauthorized JavaScript execution.

Can CVE-2018-1361 lead to data breaches?

Yes, CVE-2018-1361 can potentially lead to data breaches by allowing credentials disclosure within a trusted session.