Korean
<< Back
VID 22520
Severity 30
Port 8880, ...
Protocol TCP
Class WWW
Detailed Description IBM WebSphere Application Server 6.1 before Fix Pack 37 appears to be running on the remote host. Such versions are reportedly affected by the following vulnerability :

- An unspecified cross-site scripting vulnerability exists in the IVT application. (PM20393)

* References:
http://www-01.ibm.com/support/docview.wss?uid=swg27007951#61037

* Note: This check solely relied on the banner of the remote Web server to assess this vulnerability, so this might be a false positive.

* Platforms Affected:
IBM WebSphere Application Server versions 6.1 prior to 7.1.0.37 Fix Pack 37
Recommendation Upgrade to the latest version of IBM WebSphere Application Server 6.1 (Fix Pack 37 for 6.1 (6.1.0.37) or later), available from the IBM Support & downloads Web site at http://www-01.ibm.com/support/docview.wss?uid=swg27007951#61037
Related URL CVE-2011-1683 (CVE)
Related URL 47122 (SecurityFocus)
Related URL (ISS)