CVEvulnerability
CVE-2012-0203
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-01-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm infosphere information server 8.1
• ibm infosphere information server 8.5
• ibm infosphere information server 8.5.0.1
• ibm infosphere information server 8.5.0.2
• ibm infosphere metadata workbench 8.1
• ibm infosphere metadata workbench 8.1.1
• ibm infosphere metadata workbench 8.1.2
• ibm infosphere metadata workbench 8.5
• ibm infosphere metadata workbench 8.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21623501 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73254 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21623501 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73254 exchange.xforce.ibmcloud.com