CVE-2016-0243
29.02.2016, 11:59
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0244.
| Vendor | Product | Version |
|---|---|---|
| ibm | websphere_portal | 6.1.0.0 |
| ibm | websphere_portal | 6.1.0.1 |
| ibm | websphere_portal | 6.1.0.2 |
| ibm | websphere_portal | 6.1.0.3 |
| ibm | websphere_portal | 6.1.0.4 |
| ibm | websphere_portal | 6.1.0.5 |
| ibm | websphere_portal | 6.1.0.6 |
| ibm | websphere_portal | 6.1.5.0 |
| ibm | websphere_portal | 6.1.5.1 |
| ibm | websphere_portal | 6.1.5.2 |
| ibm | websphere_portal | 6.1.5.3 |
| ibm | websphere_portal | 7.0.0.0 |
| ibm | websphere_portal | 7.0.0.1 |
| ibm | websphere_portal | 7.0.0.2 |
| ibm | websphere_portal | 8.0.0.0 |
| ibm | websphere_portal | 8.0.0.1 |
| ibm | websphere_portal | 8.5.0.0 |
𝑥
= Vulnerable software versions
References