IBM WebSphere Portal CVE-2017-1189 Cross Site Scripting Vulnerability

Bugtraq ID:	100699
Class:	Input Validation Error
CVE:	CVE-2017-1189
Remote:	Yes
Local:	No
Published:	Sep 06 2017 12:00AM
Updated:	Sep 06 2017 12:00AM
Credit:	IBM
Vulnerable:	IBM Websphere Portal 6.1.5 .0 IBM Websphere Portal 6.1 .3 IBM Websphere Portal 6.1 .2 IBM Websphere Portal 6.1 .1 IBM Websphere Portal 8.0.0.1 CF22 IBM Websphere Portal 8.0.0.1 IBM Websphere Portal 8.0.0.0 IBM Websphere Portal 7.0.0.2 CF30 IBM Websphere Portal 7.0.0.0 IBM Websphere Portal 6.1.5.3 CF27 IBM Websphere Portal 6.1.5.3 IBM Websphere Portal 6.1.5.2 IBM Websphere Portal 6.1.5.1 IBM Websphere Portal 6.1.0.6 CF27 IBM Websphere Portal 6.1.0.6 IBM Websphere Portal 6.1.0.5 IBM Websphere Portal 6.1.0.4 IBM Websphere Portal 6.1.0.0
Not Vulnerable:

IBM WebSphere Portal CVE-2017-1189 Cross Site Scripting Vulnerability

An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.

IBM WebSphere Portal CVE-2017-1189 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.