medium4.3
CVE-2009-4152
Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrar…
Impact
Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Portal | Versions 6.1.0.0, 6.1.0.1, 6.1.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/37526
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK93429
- http://www-01.ibm.com/support/docview.wss?uid=swg27014411
- http://www.securityfocus.com/bid/37159
- http://www.vupen.com/english/advisories/2009/3367
- http://secunia.com/advisories/37526
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK93429
- http://www-01.ibm.com/support/docview.wss?uid=swg27014411
- http://www.securityfocus.com/bid/37159
- http://www.vupen.com/english/advisories/2009/3367