← Database

CVE-2009-4152

MEDIUM CVSS: 4.3 Published: 2009-12-02 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.

Affected Platforms

Ibm Websphere Portal

Weakness Type

CWE-79

References