CVE-2017-1121

Published: Feb 13, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997743

Affected (5)

Products: Ibm: Websphere Application Server

Ibm

1 product

Websphere Application Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 7.0
Ibm Websphere Application Server	Version 8.0
Ibm Websphere Application Server	Version 8.5.5
Ibm Websphere Application Server	Version 8.5
Ibm Websphere Application Server	Version 9.0