CVE-2026-11594

HIGH

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console.

StatusAnalyzed

설명

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console.

Score Summary

CVSS Score: 8.5
Version: 3.1
VPI: 85
Why this VPI (explainable, experimental)
VPI breakdown
Impact 85.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 85.00
VPI formula vpi-v1
EPSS: 0.3%
(상위 25.9%)
Attack Vector: Adjacent Network
Low Complexity
No Privileges
User Interaction Required
Scope Changed
High Confidentiality Impact
High Integrity Impact
No Availability Impact

Details

CWE Weakness Classification

References (1)

Affected Products (1)

Impact	85.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	85.00