IBM WebSphere Portal CVE-2018-1416 Cross Site Scripting Vulnerability
BID:103168
CVE-2018-1416 |Info
IBM WebSphere Portal CVE-2018-1416 Cross Site Scripting Vulnerability
| Bugtraq ID: | 103168 |
| Class: | Input Validation Error |
| CVE: |
CVE-2018-1416 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 22 2018 12:00AM |
| Updated: | Feb 22 2018 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Websphere Portal 9.0.0.0 CF15 IBM Websphere Portal 9.0.0.0 CF14 IBM Websphere Portal 9.0.0.0 IBM Websphere Portal 8.5.0.0 CF15 IBM Websphere Portal 8.5.0.0 CF14 IBM Websphere Portal 8.5.0.0 CF11 IBM Websphere Portal 8.5.0.0 CF09 IBM Websphere Portal 8.5.0.0 CF08 IBM Websphere Portal 8.5.0.0 CF06 IBM Websphere Portal 8.5.0.0 IBM Websphere Portal 8.0.0.1 CF22 IBM Websphere Portal 8.0.0.1 CF21 IBM Websphere Portal 8.0.0.1 CF20 IBM Websphere Portal 8.0.0.1 CF19 IBM Websphere Portal 8.0.0.1 CF18 IBM Websphere Portal 8.0.0.1 CF17 IBM Websphere Portal 8.0.0.1 CF16 IBM Websphere Portal 8.0.0.1 CF15 IBM Websphere Portal 8.0.0.1 CF14 IBM Websphere Portal 8.0.0.1 CF13 IBM Websphere Portal 8.0.0.1 CF12 IBM Websphere Portal 8.0.0.1 CF11 IBM Websphere Portal 8.0.0.1 CF09 IBM Websphere Portal 8.0.0.1 Cf08 IBM Websphere Portal 8.0.0.1 Cf07 IBM Websphere Portal 8.0.0.1 Cf06 IBM Websphere Portal 8.0.0.1 Cf05 IBM Websphere Portal 8.0.0.1 Cf04 IBM Websphere Portal 8.0.0.0 IBM Websphere Portal 7.0.0.2 CF30 IBM Websphere Portal 7.0.0.2 CF29 IBM Websphere Portal 7.0.0.2 CF28 IBM Websphere Portal 7.0.0.2 CF27 IBM Websphere Portal 7.0.0.2 Cf26 IBM Websphere Portal 7.0.0.2 Cf25 IBM Websphere Portal 7.0.0.2 Cf24 IBM Websphere Portal 7.0.0.2 Cf23 IBM Websphere Portal 7.0.0.1 Cf019 IBM Websphere Portal 7.0.0.1 Cf010 IBM Websphere Portal 7.0.0.1 Cf009 IBM Websphere Portal 7.0.0.1 Cf008 IBM Websphere Portal 7.0.0.1 Cf007 IBM Websphere Portal 7.0.0.1 Cf006 IBM Websphere Portal 7.0.0.1 Cf005 IBM Websphere Portal 7.0.0.1 CF004 IBM Websphere Portal 7.0.0.1 CF002 IBM Websphere Portal 7.0.0.0 |
| Not Vulnerable: | |
Discussion
IBM WebSphere Portal CVE-2018-1416 Cross Site Scripting Vulnerability
IBM WebSphere Portal is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
IBM WebSphere Portal is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
IBM WebSphere Portal CVE-2018-1416 Cross Site Scripting Vulnerability
An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.
An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.
Solution / Fix
IBM WebSphere Portal CVE-2018-1416 Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM WebSphere Portal CVE-2018-1416 Cross Site Scripting Vulnerability
References:
References: