CVE-2013-5379

No fix known EPSS <1%

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging improper tagging functionality.

Published 2013-11-13 · CVE record · OSV

Products: ibm websphere_portal