Description
Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (5)
Core 5
Core References
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0834
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39186
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0733
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1IO11274
Patch x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg24025662
Scores
EPSS
0.0106
EPSS Percentile
61.2%
Details
CWE
CWE-79
Status
published
Products (2)
ibm/webi
1.0.2
ibm/webi
< 1.0.3
Published
Apr 05, 2010
Tracked Since
Feb 18, 2026