Cross-Site Scripting Vulnerability in IBM WebSphere Portal
CVE-2014-3057

Currently unrated

Key Information:

Vendor
IBM
Status
Websphere Portal
Websphere Portal Unified Task List Portlet
Vendor
CVE Published:
29 July 2014

Summary

This vulnerability allows remote attackers to execute arbitrary scripts on user browsers by injecting malicious URLs into the Unified Task List (UTL) Portlet of IBM WebSphere Portal. By exploiting this XSS flaw, attackers can manipulate the user experience, steal sensitive information, or perform actions on behalf of the user without consent, thereby compromising the security of the affected web applications.

References

http://secunia.com/advisories/60499
third-party-advisoryx_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg21677032
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/93531
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.