CVEvulnerability
CVE-2010-0783
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-11-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm websphere application server 6.1
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.4
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.6
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.8
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.10
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.13
• ibm websphere application server 6.1.0.14
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.16
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.18
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.20
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.22
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.24
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.26
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.0.31
• ibm websphere application server 6.1.0.32
• ibm websphere application server 6.1.0.33
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.4
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.6
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.8
• ibm websphere application server 7.0.0.9
• ibm websphere application server 7.0.0.10
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.12
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/41722 Vendor Advisory
- http://secunia.com/advisories/42136 Vendor Advisory
- http://securitytracker.com/id?1024686 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM14251 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27004980 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463 www-01.ibm.com
- http://www.osvdb.org/69007 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62947 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/41722 Vendor Advisory
- http://secunia.com/advisories/42136 Vendor Advisory
- http://securitytracker.com/id?1024686 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM14251 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27004980 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463 www-01.ibm.com
- http://www.osvdb.org/69007 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62947 exchange.xforce.ibmcloud.com