CVE-2024-27270

No fix known EPSS <1%CVSS 4.7

IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.

Published 2024-03-27 · CVE record · OSV

Products: IBM WebSphere Application Server Liberty