CVE-2007-5944
Published Nov 14, 2007
Last updated 14 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBE79CF3-16A3-40FB-BD7D-5D70DEB0EE09"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC04CE9C-82B4-4406-823A-69A5E13ECA49"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F6A5B3A-E57D-4574-A481-7EDA93664076"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "425890C2-FC96-4191-B512-6A3DB7BCE2D2"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BABB4A4-182D-4FB1-88AD-B6D6EDAE10C8"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CF8ED4D-D2B6-49EC-930A-16A78E729F17"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA0C57F6-D011-47C1-B9DC-B1C3083FD28C"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F8AFDEA-237C-40CA-AFC1-ED8D212FF867"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3067F0B0-2DCD-49EB-9727-7C3C7C99A11A"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F215B48-7ED5-45EB-BD26-3D3EAD01506F"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C47D1C56-238B-414B-B2D2-D7069E42D001"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "625B5901-B0AF-4D00-BC56-525A6F72943D"
}
],
"operator": "OR"
}
]
}
]