CVE-2015-4973

IBM B2B Advanced Communications 1.0.0.2-1.0.0.3 - Cross-Site Scripting via Crafted URL

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21964806
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT10705

Scores

EPSS 0.0095
EPSS Percentile 57.6%

Details

CWE
CWE-79
Status published
Products (3)
ibm/b2b_advanced_communications 1.0.0.1
ibm/b2b_advanced_communications 1.0.0.2
ibm/b2b_advanced_communications 1.0.0.3
Published Oct 06, 2015
Tracked Since Feb 18, 2026