← Database

CVE-2010-2325

MEDIUM CVSS: 4.3 Published: 2010-06-18 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."

Affected Platforms

Ibm Websphere Application ServerIbm Zos

Weakness Type

CWE-79

References