CVEvulnerability
CVE-2009-4152
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.
Affected configurations
• ibm websphere portal 6.1.0.0
• ibm websphere portal 6.1.0.1
• ibm websphere portal 6.1.0.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/37526 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK93429 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014411 www-01.ibm.com
- http://www.securityfocus.com/bid/37159 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3367 Vendor Advisory
- http://secunia.com/advisories/37526 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK93429 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014411 www-01.ibm.com
- http://www.securityfocus.com/bid/37159 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3367 Vendor Advisory