Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Vahagn

#20699of 53,632
12.2Total CVSS
Vulnerabilities · 2
Medium
2
PT-2020-17986
6.1
2020-04-02
Ibm · Ibm Websphere Application Server Liberty · CVE-2020-4303
**Name of the Vulnerable Software and Affected Versions** IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 20.0.0.3 **Description** This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. **Recommendations** For versions 17.0.0.3 through 20.0.0.3, update to a version that contains a fix for this issue to prevent cross-site scripting attacks.
PT-2020-17987
6.1
2020-04-02
Ibm · Ibm Websphere Application Server Liberty · CVE-2020-4304
**Name of the Vulnerable Software and Affected Versions** IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 20.0.0.3 **Description** The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. **Recommendations** For versions 17.0.0.3 through 20.0.0.3, update to a version that contains a fix for this issue to prevent cross-site scripting attacks.