IBM WebSphere Application Server CVE-2013-4005 Cross Site Scripting Vulnerability

Bugtraq ID:	61901
Class:	Input Validation Error
CVE:	CVE-2013-4005
Remote:	Yes
Local:	No
Published:	Aug 19 2013 12:00AM
Updated:	Jan 16 2014 05:15PM
Credit:	IBM
Vulnerable:	IBM Websphere Application Server 8.0 IBM Websphere Application Server 6.1
Not Vulnerable:

IBM WebSphere Application Server CVE-2013-4005 Cross Site Scripting Vulnerability

IBM WebSphere Application Server is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

IBM WebSphere Application Server versions 6.1, 7, 8, and 8.5 are vulnerable.

IBM WebSphere Application Server CVE-2013-4005 Cross Site Scripting Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

IBM WebSphere Application Server CVE-2013-4005 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM WebSphere Application Server CVE-2013-4005 Cross Site Scripting Vulnerability

References: