CVE-2011-2754 Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, all...
MediumCVSS 4.3
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm web content manager | All versions | No fix listed |
| ibm websphere portal | = 7.0.0.0 | No fix listed |
| ibm websphere portal | = 7.0.0.1 | No fix listed |
| ibm websphere portal | = 7.0.0.1-cf002 | No fix listed |
| ibm websphere portal | = 7.0.0.1-cf003 | No fix listed |
| ibm websphere portal | = 7.0.0.1-cf004 | No fix listed |
| ibm websphere portal | = 7.0.0.1-cf005 | No fix listed |
References
- 45106 third-party-advisory vendor-advisory
- www.ibm.com