CVE-2008-5228
IBM Workplace Content Management 6.0G and 6.1 before CF8 - Cross-Site Scripting via URI Parameters
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being encoded."
References (6)
Core 6
Core References
Patch vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PK73933
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32408
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46749
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/3234
Vendor Advisory vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PK73108
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32763
Scores
EPSS
0.0122
EPSS Percentile
65.4%
Details
CWE
CWE-79
Status
published
Products (2)
ibm/workplace_content_management
6.0
ibm/workplace_content_management
6.1
Published
Nov 25, 2008
Tracked Since
Feb 18, 2026