CVE-2007-5944

Опубликовано: 14 нояб. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02134

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-9rmf-q528-p6rv

github

почти 4 года назад