VID |
22520 |
Severity |
30 |
Port |
8880, ... |
Protocol |
TCP |
Class |
WWW |
Detailed Description |
IBM WebSphere Application Server 6.1 before Fix Pack 37 appears to be running on the remote host. Such versions are reportedly affected by the following vulnerability :
- An unspecified cross-site scripting vulnerability exists in the IVT application. (PM20393)
* References: http://www-01.ibm.com/support/docview.wss?uid=swg27007951#61037
* Note: This check solely relied on the banner of the remote Web server to assess this vulnerability, so this might be a false positive.
* Platforms Affected: IBM WebSphere Application Server versions 6.1 prior to 7.1.0.37 Fix Pack 37 |
Recommendation |
Upgrade to the latest version of IBM WebSphere Application Server 6.1 (Fix Pack 37 for 6.1 (6.1.0.37) or later), available from the IBM Support & downloads Web site at http://www-01.ibm.com/support/docview.wss?uid=swg27007951#61037 |
Related URL |
CVE-2011-1683 (CVE) |
Related URL |
47122 (SecurityFocus) |
Related URL |
(ISS) |
|