First published: Wed Mar 06 2019(Updated: )
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Websphere Application Server | >=8.5.0.0<=8.5.5.14 | |
Ibm Websphere Application Server | >=9.0.0.0<=9.0.0.10 | |
IBM WebSphere Virtual Enterprise | =7.0 | |
IBM WebSphere Virtual Enterprise | =8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2019-4030.
The severity of CVE-2019-4030 is medium.
The vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
IBM WebSphere Application Server versions 8.5 and 9.0 are affected by CVE-2019-4030.
Apply the necessary patches or updates provided by IBM to fix the vulnerability.