PT-2020-18142

CVE-2020-4575

·

Published

2020-08-27

·

Updated

2020-08-27

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server ND versions 8.5 through 9.0 IBM WebSphere Virtual Enterprise versions 7.0 through 8.0
Description The issue is related to cross-site scripting. It occurs when the High Availability Deployment Manager is configured.
Recommendations For IBM WebSphere Application Server ND versions 8.5 through 9.0, update the configuration to prevent cross-site scripting. For IBM WebSphere Virtual Enterprise versions 7.0 through 8.0, update the configuration to prevent cross-site scripting. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2020-4575
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com