Orta CVSS 5.4
CVE-2025-12635: Websphere Application Server: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are affected by cross-site scripting due to improper validation of user-supplied input. An attacker could exploit this vulnerability by using a specially crafted URL to redirect the user to a malicious site.
Özet bilgiler
- Ürün
- Ibm Websphere Application Server
- CVSS v3.1
- 5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - EPSS
- %0,17 (yüzdelik 6)
- CWE
- CWE-79
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-websphere-application-server | 8.5 | — | 8.5.5.29 |
| ibm-websphere-application-server | 9.0 | — | 9.0.5.27 |
| ibm-websphere-application-server | 17.0.0.3 | — | 26.0.0.1 |