Cross-Site Scripting Vulnerability in IBM Multi-Enterprise Integration Gateway and B2B Advanced Communications
CVE-2015-4973

Currently unrated

Key Information:

Vendor
IBM
Status
B2b Advanced Communications
Vendor
CVE Published:
6 October 2015

Summary

A cross-site scripting vulnerability exists in the IBM Multi-Enterprise Integration Gateway and B2B Advanced Communications products. This security flaw allows remote attackers to exploit the system by injecting arbitrary web scripts or HTML code through crafted URLs. Affected versions include Multi-Enterprise Integration Gateway 1.x up to 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 prior to 1.0.0.3_2. Organizations utilizing these products should consider implementing security measures to mitigate the risk of exploitation, ensuring the integrity of their web applications.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21964806
x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1IT10705
vendor-advisoryx_refsource_AIXAPAR

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.