CVEvulnerability
CVE-2008-0717
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response.
Affected configurations
• ibm websphere edge server 5.1
• ibm websphere edge server 5.1.1
• ibm websphere edge server 6.0
• ibm websphere edge server 6.0.1
• ibm websphere edge server 6.0.2
• ibm websphere edge server 6.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/28785 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21294776 www-1.ibm.com
- http://www.securityfocus.com/bid/27665 www.securityfocus.com
- http://www.securitytracker.com/id?1019315 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0446 www.vupen.com
- http://secunia.com/advisories/28785 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21294776 www-1.ibm.com
- http://www.securityfocus.com/bid/27665 www.securityfocus.com
- http://www.securitytracker.com/id?1019315 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0446 www.vupen.com