CVE-2018-1836: XSS
IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150661.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1836?
CVE-2018-1836 is classified as a high severity cross-site scripting vulnerability in IBM WebSphere MQ.
How do I fix CVE-2018-1836?
To fix CVE-2018-1836, users should upgrade their IBM WebSphere MQ to a version that has addressed this vulnerability.
Which versions of IBM WebSphere MQ are affected by CVE-2018-1836?
CVE-2018-1836 affects IBM WebSphere MQ versions 9.0.2 to 9.0.5 and 9.1.0.0 to 9.1.0.1.
What impact does CVE-2018-1836 have on users?
CVE-2018-1836 can lead to the embedding of arbitrary JavaScript code in the Web UI, potentially allowing for credentials disclosure.
Is CVE-2018-1836 a remote exploit vulnerability?
CVE-2018-1836 can be exploited remotely by an attacker who has access to the Web UI of the affected IBM WebSphere MQ.