← Database

CVE-2024-45073

MEDIUM CVSS: 4.8 Published: 2024-09-30 Modified: 2026-06-17

Description

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected Platforms

Microsoft WindowsOracle SolarisHp Hp-UxIbm AixIbm Z\/OsLinux Linux KernelIbm Websphere Application Server

Weakness Type

CWE-79, CWE-79

References