CVE-2018-1793: XSS

Published Oct 3, 2018

Updated

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using SAML ear is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148948.

Affected Software

4 affected components

IBM WebSphere Application Server Feature Pack for Web Services=7.0

IBM WebSphere Application Server Feature Pack for Web Services=8.0

IBM WebSphere Application Server Feature Pack for Web Services=8.5

IBM WebSphere Application Server Feature Pack for Web Services=9.0

Remediation

Patch Available

https://www.ibm.com/support/docview.wss?uid=ibm10729563

Event History

Oct 3, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1793?

CVE-2018-1793 has been classified as a moderate severity vulnerability due to its potential for credential disclosure.

How do I fix CVE-2018-1793?

To fix CVE-2018-1793, you should update IBM WebSphere Application Server to the latest version, which contains the necessary security patches.

What systems are affected by CVE-2018-1793?

CVE-2018-1793 affects IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0.

What type of vulnerability is CVE-2018-1793?

CVE-2018-1793 is a cross-site scripting (XSS) vulnerability that allows arbitrary JavaScript code execution.

Can CVE-2018-1793 lead to data breaches?

Yes, CVE-2018-1793 can potentially lead to data breaches due to credential disclosure within a trusted session.