ID de Prueba:	1.3.6.1.4.1.25623.1.0.801999
Categoría:	Web Servers
Título:	IBM WebSphere Application Server XSS Vulnerability (Nov 2011)
Resumen:	IBM WebSphere Application Server is prone to a cross-site; scripting (XSS) vulnerability.
Descripción:	Summary: IBM WebSphere Application Server is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is caused by improper validation of user-supplied input in the Administration Console, which allows the remote attacker to inject malicious script into a Web page. Vulnerability Impact: Successful exploitation will let remote attackers to inject malicious script into a Web page. Further an attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Affected Software/OS: IBM WebSphere Application Server version 6.1.x prior to 6.1.0.29 and 7.1.x prior to 7.0.0.7. Solution: Update to version 6.1.0.29, 7.0.0.7 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2748 AIX APAR: PK92057 http://www.ibm.com/support/docview.wss?uid=swg1PK92057 AIX APAR: PK99481 http://www.ibm.com/support/docview.wss?uid=swg1PK99481 XForce ISS Database: was-adminconsole-xss(54229) https://exchange.xforce.ibmcloud.com/vulnerabilities/54229
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.