cpe:/a:ibm:websphere_application_server:7.0 cpe:/a:ibm:websphere_application_server:8.0 cpe:/a:ibm:websphere_application_server:8.5 cpe:/a:ibm:websphere_application_server:8.5.5 cpe:/a:ibm:websphere_application_server:9.0 CVE-2017-1121 2017-02-13T17:59:00.257-05:00 2017-07-24T21:29:06.670-04:00 3.5 NETWORK MEDIUM SINGLE_INSTANCE NONE PARTIAL NONE http://nvd.nist.gov SECTRACK 1037806 BID 96164 CONFIRM http://www.ibm.com/support/docview.wss?uid=swg21997743 IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997743