CVE-2019-4030

Published: Mar 6, 2019Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946.

Affected (4)

Products: Ibm: Websphere Application Server, Websphere Virtual Enterprise

Ibm

2 products

Websphere Application Server

Websphere Virtual Enterprise

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	From 8.5.0.0 to 8.5.5.14
Ibm Websphere Application Server	From 9.0.0.0 to 9.0.0.10
Ibm Websphere Virtual Enterprise	Version 7.0
Ibm Websphere Virtual Enterprise	Version 8.0