NVD

Id
24111  
Name
CVE-2015-1908  
Description
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and 8.5.0 through CF05, as used in Web Content Manager and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-04-27  
Modified Date
2016-11-29  
Seq
2015-1908  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
127964 24111 CVE-2015-1908 PI37661  View
127965 24111 CVE-2015-1908 http://www-01.ibm.com/support/docview.wss?uid=swg21701566  View
127966 24111 CVE-2015-1908 74218  View
127967 24111 CVE-2015-1908 1032189  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7183 JVNDB-2015-002503 IBM Web Content Manager などの製品で使用される IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 IBM Web Content Manager およびその他の製品で使用される IBM WebSphere Portal には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-1908 79133 CVE-2015-1908 24111 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002503.html 2015-04-14 2015-04-28 View