CVE-2015-1917 | BDVDB-2026-70402 Detail

Description#

Cross-site scripting (XSS) vulnerability in the Active Content Filtering component in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1032970
http://www.securityfocus.com/bid/75479
http://www-01.ibm.com/support/docview.wss?uid=swg1PI38732
http://www-01.ibm.com/support/docview.wss?uid=swg21958024

Exploit#

No public exploit known

History#

Version 12015-07-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.