Cross-site scripting (XSS) vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 prior to 8.0.0.2 allows remote malicious users to inject arbitrary web script or HTML via a crafted URI that is included in an error response.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ibm websphere mq 8.0 |
||
ibm websphere mq 8.0.0.1 |
||
ibm websphere mq |