CVE-2018-1820: XSS
IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150096.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1820?
The severity of CVE-2018-1820 is classified as critical due to its potential for cross-site scripting and credential disclosure.
How do I fix CVE-2018-1820?
To address CVE-2018-1820, upgrade to the latest patched version of IBM WebSphere Portal.
Who is affected by CVE-2018-1820?
CVE-2018-1820 affects users of IBM WebSphere Portal versions 8.0, 8.5, and 9.0.
What exploitation techniques are associated with CVE-2018-1820?
CVE-2018-1820 may be exploited by embedding arbitrary JavaScript in the Web UI, leading to unauthorized actions.
What are the potential impacts of CVE-2018-1820?
The potential impacts of CVE-2018-1820 include the unauthorized disclosure of user credentials within a trusted session.