CVEvulnerability
CVE-2011-2754
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-07-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm web content manager
• ibm websphere portal 7.0.0.0
• ibm websphere portal 7.0.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/45106 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21503959 www.ibm.com
- http://secunia.com/advisories/45106 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21503959 www.ibm.com