Test ID:	1.3.6.1.4.1.25623.1.0.810732
Category:	Web application abuses
Title:	IBM WebSphere Portal Cross Site Scripting Vulnerability (swg22000152)
Summary:	IBM Websphere Portal is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: IBM Websphere Portal is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is due to error in handling embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Impact: Successful exploitation will allow a remote attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: IBM WebSphere Portal 8.5.0 before Cumulative Fix 14 (CF14) IBM WebSphere Portal 9.0.0 before Cumulative Fix 14 (CF14) Solution: Upgrade to IBM WebSphere Portal 8.5.0 with Cumulative Fix 14 (CF14), 9.0.0 with Cumulative Fix 14 (CF14) or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1120 BugTraq ID: 97075 http://www.securityfocus.com/bid/97075 http://www.securitytracker.com/id/1038146
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.