CVE

Id
45569  
CVE No.
CVE-2010-2985  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the searchTerm parameter to ServiceRegistry/HelpSearch.do or (2) the queryItems[0].value parameter to ServiceRegistry/QueryWizardProcessStep1.do.  
Phase
Assigned (20100809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
496314 45569 CVE-2010-2985 AIXAPAR:IZ75984  View
496315 45569 CVE-2010-2985 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75984  View
496316 45569 CVE-2010-2985 AIXAPAR:IZ76926  View
496317 45569 CVE-2010-2985 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IZ76926  View
496318 45569 CVE-2010-2985 BID:42281  View
496319 45569 CVE-2010-2985 URL:http://www.securityfocus.com/bid/42281  View
496320 45569 CVE-2010-2985 SECUNIA:40862  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39209 JVNDB-2010-004994 Nessus 用の Nessus Web Server プラグインにおける重要な情報を取得される脆弱性 Nessus 用の Nessus Web Server プラグインの nessusd_www_server.nbin には、レスポンス内にバージョンを表示する問題があるため、重要な情報を取得される脆弱性が存在します。 CVE-2010-2989 45569 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004994.html  View