CVE-2012-3293 Information

Description

Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45 7.0.x before 7.0.0.25 8.0.x before 8.0.0.4 and 8.5.x before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements related to a cross-frame scripting (XFS) issue.

Reference

http://www.securityfocus.com/bid/55149 http://www-01.ibm.com/support/docview.wss?uid=swg1PM60839 http://www-01.ibm.com/support/docview.wss?uid=swg21606096 http://www-01.ibm.com/support/docview.wss?uid=swg27022958 https://exchange.xforce.ibmcloud.com/vulnerabilities/77179