| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 5.1.1.10= 5.1.1.11= 5.1.1.12= 5.1.1.13= 5.1.1.14= 5.1.1.15= 5.1.1.16= 5.1.1.4= 5.1.1.5= 5.1.1.6= 5.1.1.7= 5.1.1.8= 5.1.1.9 |
Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free