CVE-2009-4152

No fix known EPSS 1%

Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.

Published 2009-12-02 · CVE record · OSV

Products: ibm websphere_portal