Description
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Metrics
CVSS 2.0 3.5/10
AV:N/AC:M/Au:S/C:N/I:P/A:NWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Mar 13, 2015
- Last modified
- Jun 17, 2026
- NVD status
- Modified