Description
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by IBM · textremotemultiple
https://www.exploit-db.com/exploits/32839
References (10)
Core 10
Core References
Exploit, Third Party Advisory
http://packetstormsecurity.com/files/170073/IBM-Websphere-Application-Server-7.0-Cross-Site-Scripting.html
Third Party Advisory vdb-entry
http://www.vupen.com/english/advisories/2009/0854
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/34259
Vendor Advisory vdb-entry
http://www.vupen.com/english/advisories/2009/0607
Vendor Advisory third-party-advisory
http://secunia.com/advisories/34131
Third Party Advisory third-party-advisory
http://secunia.com/advisories/34461
Vendor Advisory vendor-advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212
Vendor Advisory vendor-advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK77505
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/34001
Various Sources vendor-advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988
Scores
EPSS
0.2462
EPSS Percentile
96.2%
Details
CWE
CWE-79
Status
published
Products (25)
ibm/websphere_application_server
6.1
ibm/websphere_application_server
6.1.0
ibm/websphere_application_server
6.1.0.0
ibm/websphere_application_server
6.1.0.1
ibm/websphere_application_server
6.1.0.2
ibm/websphere_application_server
6.1.0.3
ibm/websphere_application_server
6.1.0.4
ibm/websphere_application_server
6.1.0.5
ibm/websphere_application_server
6.1.0.6
ibm/websphere_application_server
6.1.0.7
... and 15 more
Published
Mar 09, 2009
Tracked Since
Feb 18, 2026