CVEvulnerability
CVE-2011-0315
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an application.
Affected configurations
• ibm websphere application server 6.1
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.13
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.0.31
• ibm websphere application server 6.1.0.33
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.4
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.6
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.8
• ibm websphere application server 7.0.0.9
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.13
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/42938 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM18512 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27007951 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463 www-01.ibm.com
- http://www.securityfocus.com/bid/46736 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0564 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64554 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42938 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM18512 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27007951 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463 www-01.ibm.com
- http://www.securityfocus.com/bid/46736 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0564 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64554 exchange.xforce.ibmcloud.com