CVE-2007-3265
IBM WebSphere Application Server < 6.1.0.7 - Cross-Site Scripting in Samples Component
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the Samples component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (6)
Core 6
Core References
Patch x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg27007951
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/41612
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2234
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24505
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34905
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/38468
Scores
EPSS
0.0186
EPSS Percentile
77.1%
Details
Status
published
Products (1)
ibm/websphere_application_server
< 6.1.0.7
Published
Jun 19, 2007
Tracked Since
Feb 18, 2026