PT-2010-1803 · Ibm · Ibm Filenet P8 Application Engine

Publicado

2010-09-20

·

Atualizado

2010-09-21

·

CVE-2009-5000

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM FileNet P8 Application Engine (P8AE) versions 4.0.2.x through 4.0.2.2
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the Workplace component. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to .jsp pages.
Recommendations For versions 4.0.2.x through 4.0.2.2, update to version 4.0.2.3-P8AE-FP003 or later to resolve the issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-5000

Produtos afetados

Ibm Filenet P8 Application Engine