CVE-2024-27270: IBM WebSphere Application Server Liberty cross-site scripting
IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.
Other sources
IBM WebSphere Application Server Liberty is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27270?
CVE-2024-27270 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2024-27270?
To patch CVE-2024-27270, you should update IBM WebSphere Application Server Liberty to the latest version as recommended in the vendor's security advisory.
Which versions of IBM WebSphere Application Server Liberty are affected by CVE-2024-27270?
CVE-2024-27270 affects IBM WebSphere Application Server Liberty versions 23.0.0.3 through 24.0.0.3.
What types of attacks can CVE-2024-27270 facilitate?
CVE-2024-27270 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject and execute arbitrary JavaScript code.
Who is the vendor responsible for CVE-2024-27270?
The vendor responsible for CVE-2024-27270 is IBM, specifically regarding their WebSphere Application Server Liberty product.