IBM WebSphere Application Server...

- AV AC AU C I A
发布： 2025-04-13
修订： 2025-04-13

IBM Websphere Application Server是一款企业性质的WEB应用服务程序。 IBM Websphere Application Server中的UDDI用户控制台对用户提交的输入缺少过滤，远程攻击者可以利用漏洞执行任意脚本代码，窃取COOKIE敏感信息。 问题是对传递给uddigui/navigateTree.do页的eyField, nameField, valueField, frameReturn参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息或执行任意代码。 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0.2 .3 IBM Websphere Application Server 6.0.2 .23 IBM Websphere Application Server 6.0.2 .22 IBM Websphere Application Server 6.0.2 .13 IBM Websphere...

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有0条受影响产品信息