CVE-2026-101117: IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM WebSphere eXtreme Scaleto a version that resolves this vulnerability.Fixed in 8.6.2.2Patch PH73641
Event History
Frequently Asked Questions
Which deployments are affected?
IBM WebSphere Extreme Scale Liberty deployments running versions 8.6.1.0 through 8.6.2.2 are identified as affected.
Does exploitation require authentication or user interaction?
No. The supplied vector indicates the issue is remotely exploitable with low attack complexity, requires no privileges, and requires no user interaction.
What security impact can exploitation have?
The issue may allow a remote attacker to bypass security restrictions through an improper Content Security Policy configuration. The supplied severity vector indicates high confidentiality and integrity impact, with no availability impact.