Multiple Fujitsu Interstage Products Unspecified Cross Site Scripting Vulnerability
BID:41038
Info
Multiple Fujitsu Interstage Products Unspecified Cross Site Scripting Vulnerability
| Bugtraq ID: | 41038 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 22 2010 12:00AM |
| Updated: | Jun 22 2010 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Fujitsu Interstage Portalworks 8.0 Fujitsu Interstage Portalworks 8.0 Fujitsu Interstage Portalworks 6.0 L10 Fujitsu Interstage Portalworks 6.0 Fujitsu Interstage Portalworks 5.1 Fujitsu Interstage Portalworks 5.0 L20 Fujitsu Interstage Portalworks 5.0 L10 Fujitsu Interstage Portalworks 5.0 Fujitsu Interstage Interaction Manager 9.1.1 Fujitsu Interstage Interaction Manager 9.1 Fujitsu Interstage Interaction Manager 9.0.1 Fujitsu Interstage Interaction Manager 9.0 Fujitsu Interstage Form Coordinator Workflow Suite 6.1 Fujitsu Interstage Business Application Server Standard Edition 8.0.1 Fujitsu Interstage Business Application Server Standard Edition 8.0 Fujitsu Interstage Business Application Server Enterprise Edition 8.0.1 Fujitsu Interstage Business Application Server Enterprise Edition 7.0.1 Fujitsu Interstage Business Application Server Enterprise Edition 7.0 Fujitsu INTERSTAGE Business Application Server Enterprise 8.0.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0.1 B Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 B Fujitsu INTERSTAGE Application Server Standard-J Edition 9.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.3 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0.1 Fujitsu INTERSTAGE Application Server Standard-J Edition 8.0 Fujitsu INTERSTAGE Application Server Standard-J Edition 9.1.0B Fujitsu iNTERSTAGE Application Server Standard Edition 8.0.3 Fujitsu iNTERSTAGE Application Server Standard Edition 8.0 Fujitsu iNTERSTAGE Application Server Standard Edition 7.0.1 Fujitsu iNTERSTAGE Application Server Standard Edition 6.0.2 Fujitsu iNTERSTAGE Application Server Standard Edition 6.0.1 Fujitsu iNTERSTAGE Application Server Standard Edition 7.0 L11 Fujitsu iNTERSTAGE Application Server Standard Edition 7.0 L10 Fujitsu iNTERSTAGE Application Server Standard Edition 7.0 Fujitsu iNTERSTAGE Application Server Standard Edition 6.0 L10 Fujitsu iNTERSTAGE Application Server Standard Edition 6.0 Fujitsu INTERSTAGE Application Server Plus Developer 7.0 L10 Fujitsu INTERSTAGE Application Server Plus Developer 6.0 L10 Fujitsu INTERSTAGE Application Server Plus Developer 5.0 L20 Fujitsu Interstage Application Server Plus 7.0.1 Fujitsu Interstage Application Server Plus 6.0.2 Fujitsu Interstage Application Server Plus 6.0.1 Fujitsu Interstage Application Server Plus 5.1.1 Fujitsu Interstage Application Server Plus 7.0 L11 Fujitsu Interstage Application Server Plus 7.0 L10 Fujitsu Interstage Application Server Plus 7.0 Fujitsu Interstage Application Server Plus 6.0 L11 Fujitsu Interstage Application Server Plus 6.0 L10C Fujitsu Interstage Application Server Plus 6.0 L10B Fujitsu Interstage Application Server Plus 6.0 L10A Fujitsu Interstage Application Server Plus 6.0 L10 Fujitsu Interstage Application Server Plus 6.0 Fujitsu Interstage Application Server Plus 5.0 L20A Fujitsu Interstage Application Server Plus 5.0 L20 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0.1 B Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 B Fujitsu INTERSTAGE Application Server Enterprise Edition 9.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.3 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 8.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0.2 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0.1 Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1.0B Fujitsu INTERSTAGE Application Server Enterprise Edition 9.1.0A Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0 L11 Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0 L10 Fujitsu INTERSTAGE Application Server Enterprise Edition 7.0 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 L10C Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 L10B Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 L10 Fujitsu INTERSTAGE Application Server Enterprise Edition 6.0 Fujitsu Interstage Application Framework Suite Standard Edition 7.0.2 Fujitsu Interstage Application Framework Suite Standard Edition 7.0.1 Fujitsu Interstage Application Framework Suite Standard Edition 6.0.2 Fujitsu Interstage Application Framework Suite Standard Edition 6.0.1 Fujitsu Interstage Application Framework Suite Standard Edition 7.0 L11 Fujitsu Interstage Application Framework Suite Standard Edition 7.0 L10 Fujitsu Interstage Application Framework Suite Standard Edition 6.0 L10C Fujitsu Interstage Application Framework Suite Standard Edition 6.0 L10B Fujitsu Interstage Application Framework Suite Standard Edition 6.0 L10 Fujitsu Interstage Application Framework Suite Standard Edition 6.0 Fujitsu Interstage Application Framework Suite Enterprise Edition 7.0.1 Fujitsu Interstage Application Framework Suite Enterprise Edition 6.0.2 Fujitsu Interstage Application Framework Suite Enterprise Edition 6.0.1 Fujitsu Interstage Application Framework Suite Enterprise Edition 6.0 L10C Fujitsu Interstage Application Framework Suite Enterprise Edition 6.0 L10B Fujitsu Interstage Application Framework Suite Enterprise Edition 6.0 L10 Fujitsu Interstage Application Framework Suite Enterprise Edition 6.0 |
| Not Vulnerable: | |
Discussion
Multiple Fujitsu Interstage Products Unspecified Cross Site Scripting Vulnerability
Multiple Fujitsu Interstage products are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Multiple Fujitsu Interstage products are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
Multiple Fujitsu Interstage Products Unspecified Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Solution / Fix
Multiple Fujitsu Interstage Products Unspecified Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Multiple Fujitsu Interstage Products Unspecified Cross Site Scripting Vulnerability
References:
References:
- Fujitsu Homepage (Fujitsu)
- Interstage Portalworks (XSS) (Fujitsu)