CVSS: 4.3EPSS: 0%CPEs: 21EXPL: 0CVE-2014-3010
https://notcve.org/view.php?id=CVE-2014-3010
Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.2, 6.3 before 6.3.0.6, 7.0 before 7.0.0.6, 7.5 before 7.5.0.5, and 8.0 before 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de XSS en la interfaz de usuario en IBM WebSphere Service Registry And Repository (WSRR) 6.2, 6.3 anterior a 6.3.0.6, 7.0 anterior a 7.0.0.6, 7.5 anterior a 7.5.0.5 y 8.0 anterior a 8.0.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada. • http://secunia.com/advisories/58949 http://www-01.ibm.com/support/docview.wss?uid=swg1IV56254 http://www-01.ibm.com/support/docview.wss?uid=swg21672829 https://exchange.xforce.ibmcloud.com/vulnerabilities/92999 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 11EXPL: 0CVE-2011-1357
https://notcve.org/view.php?id=CVE-2011-1357
Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header. Vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en agentDetect.jsp en el web UI en IBM WebSphere Service Registry and Repository (WSRR) v6.3 anterior a v6.3.0.5, v7.0 anterior a v7.0.0.5, y v7.5 anterior a v7.5.0.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través header HTTP User-Agent • http://www.ibm.com/support/docview.wss?uid=swg1IV01657 https://exchange.xforce.ibmcloud.com/vulnerabilities/69040 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •