CVE-2019-4030 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function...
MediumCVSS 5.4
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | >= 8.5.0.0, <= 8.5.5.14 | No fix listed |
| ibm websphere application server | >= 9.0.0.0, <= 9.0.0.10 | No fix listed |
| ibm websphere virtual enterprise | = 7.0 | No fix listed |
| ibm websphere virtual enterprise | = 8.0 | No fix listed |
| ibm websphere application server | = 8.5 | No fix listed |
| ibm websphere application server | = 9.0 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- ibm-websphere-cve20194030-xss(155946) vdb-entry vendor-advisory