IBM WebSphere Commerce CVE-2018-1541 Cross Site Scripting Vulnerability

Bugtraq ID:	105744
Class:	Input Validation Error
CVE:	CVE-2018-1541
Remote:	Yes
Local:	No
Published:	Oct 19 2018 12:00AM
Updated:	Oct 19 2018 12:00AM
Credit:	IBM
Vulnerable:	IBM WebSphere Commerce 9.0.0.6 IBM WebSphere Commerce 9.0.0.0 IBM WebSphere Commerce 8.0.4.9 IBM WebSphere Commerce 8.0.4.8 IBM WebSphere Commerce 8.0.4.5 IBM WebSphere Commerce 8.0.4.14 IBM WebSphere Commerce 8.0.4.0 IBM WebSphere Commerce 8.0.3.4 IBM WebSphere Commerce 8.0.3.3 IBM WebSphere Commerce 8.0.3.0 IBM WebSphere Commerce 8.0.1.9 IBM WebSphere Commerce 8.0.1.8 IBM WebSphere Commerce 8.0.1.2 IBM WebSphere Commerce 8.0.1.13 IBM WebSphere Commerce 8.0.1.11 IBM WebSphere Commerce 8.0.1.10 IBM WebSphere Commerce 8.0.1.1 IBM WebSphere Commerce 8.0.1.0 IBM WebSphere Commerce 8.0.0.9 IBM WebSphere Commerce 8.0.0.8 IBM WebSphere Commerce 8.0.0.7 IBM WebSphere Commerce 8.0.0.6 IBM WebSphere Commerce 8.0.0.5 IBM WebSphere Commerce 8.0.0.4 IBM WebSphere Commerce 8.0.0.2 IBM WebSphere Commerce 8.0.0.19 IBM WebSphere Commerce 8.0.0.18 IBM WebSphere Commerce 8.0.0.17 IBM WebSphere Commerce 8.0.0.16 IBM WebSphere Commerce 8.0.0.10 IBM WebSphere Commerce 8.0.0.0 IBM WebSphere Commerce 7.0 Feature Pack 8
Not Vulnerable:	IBM WebSphere Commerce 9.0.0.7 IBM WebSphere Commerce 8.0.4.18

IBM WebSphere Commerce CVE-2018-1541 Cross Site Scripting Vulnerability

An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.

IBM WebSphere Commerce CVE-2018-1541 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM WebSphere Commerce CVE-2018-1541 Cross Site Scripting Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: A cross site scripting vulnerability affects IBM WebSphere Co (IBM)