Test ID:	1.3.6.1.4.1.25623.1.0.807675
Category:	Web Servers
Title:	IBM WebSphere Application Server Liberty Code Injection Vulnerability (swg21978293)
Summary:	IBM WebSphere Application Server Liberty is prone to a code; injection vulnerability.
Description:	Summary: IBM WebSphere Application Server Liberty is prone to a code injection vulnerability. Vulnerability Insight: The flaw is due to an improper validation of user-supplied input in the OpenID Connect (OIDC) client web application. Vulnerability Impact: Successful exploitation will allow remote attackers to inject arbitrary web script or HTML via a crafted URL. Affected Software/OS: IBM WebSphere Application Server Liberty version 8.5.x prior to 8.5.5.9. Solution: Update to version 8.5.5.9 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0283 AIX APAR: PI58003 http://www-01.ibm.com/support/docview.wss?uid=swg1PI58003 http://www.securitytracker.com/id/1035330
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.