IBM webMethods Integration Server 12.0 allows malicious HTML code injection

Summary

IBM webMethods Integration Server 12.0 has a security flaw that allows an attacker to inject code into web pages viewed by users. This could lead to unauthorized actions being taken within the victim's browser. To fix this, update or patch the affected software to the latest version.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
ibm	webmethods_integration_server	12.0.0	–

Original title

IBM webMethods Integration Server 12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within t...

Original description

IBM webMethods Integration Server 12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

nvd CVSS3.1 5.4

Vulnerability type

CWE-80 Basic XSS

https://www.ibm.com/support/pages/node/7260932 Vendor Advisory