PT-2016-1134 · Ibm · Ibm Websphere Portal

Published 2016-01-27 · Updated 2016-12-07 · CVE-2016-0209

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal version 8.5.0 before CF09

Description The issue is related to a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is due to the lack of protection measures for the web page structure, which can be exploited by a remote attacker to inject malicious code.

Recommendations For IBM WebSphere Portal version 8.5.0 before CF09, apply the cumulative fix CF09 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2016-00395

CVE-2016-0209

Affected Products

Ibm Websphere Portal

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-0209 · Security Note
• https://bdu.fstec.ru/vul/2016-00395 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0209 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21974564 · Vendor Advisory
• http://securitytracker.com/id/1034844 · Note