CVE-2016-0283

published 2016-03-19

CVE-2016-0283: Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—

CWE-79