NVD

Id
61130  
Name
CVE-2006-2431  
Description
Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as "faultfactor," but this is likely erroneous.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-05-17  
Modified Date
2011-05-09  
Seq
2006-2431  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315855 61130 CVE-2006-2431 20060509 IBM Websphere Application Server Multiple Vulnerabilities  View
315856 61130 CVE-2006-2431 910  View
315857 61130 CVE-2006-2431 1017170  View
315858 61130 CVE-2006-2431 PK22416  View
315859 61130 CVE-2006-2431 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064  View
315860 61130 CVE-2006-2431 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012163  View
315861 61130 CVE-2006-2431 PK16602  View
315862 61130 CVE-2006-2431 PK26181  View
315863 61130 CVE-2006-2431 20061107 Minimizing error cascades in vulnerability information management  View
315864 61130 CVE-2006-2431 http://www.niscc.gov.uk/niscc/docs/re-20061031-00727.pdf?lang=en  View
315865 61130 CVE-2006-2431 20061106 Cross Site Scripting (XSS) Vulnerability in IBM WebSphere Application Server  View
315866 61130 CVE-2006-2431 21018  View
315867 61130 CVE-2006-2431 ADV-2006-1736  View
315868 61130 CVE-2006-2431 websphere-faultfactor-xss(30055)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58075 JVNDB-2006-000271 IBM WebSphere Application Server の SOAP ポートにおけるクロスサイトスクリプティングの脆弱性 ------------ CVE-2006-2431 18533 CVE-2006-2431 61130 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000271.html 2006-05-09 2007-04-01 View