Test ID:	1.3.6.1.4.1.25623.1.0.806872
Category:	Web Servers
Title:	IBM WebSphere Application Server XSS Vulnerability (swg21974520)
Summary:	IBM WebSphere Application Server is prone to a cross-site; scripting (XSS) vulnerability.
Description:	Summary: IBM WebSphere Application Server is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is due to due to an improper validation of user-supplied input. Vulnerability Impact: Successful exploitation will allow a remote attacker to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked, also could steal the victim's cookie-based authentication credentials. Affected Software/OS: IBM WebSphere Application Server version 7.0.x prior to 7.0.0.41, 8.0.x prior to 8.0.0.12 and 8.5.x prior to 8.5.5.9. Solution: Update to version 7.0.0.41, 8.0.0.12, 8.5.5.9 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7417 AIX APAR: PI49272 http://www-01.ibm.com/support/docview.wss?uid=swg1PI49272 BugTraq ID: 81738 http://www.securityfocus.com/bid/81738 http://www.securitytracker.com/id/1034783
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.