CVE-2017-1303 IBM Websphere Portal Cross-Site Scripting vulnerability (swg22004979)

IBM WebSphere Portal is a solution for delivering web content and applications in an integrated, differentiated and personalized web experience.

The application is prone to a cross site scripting vulnerability because it fails to sanitize user supplied input.

Affected Versions:
IBM WebSphere Portal 9.0
IBM WebSphere Portal 8.5
IBM WebSphere Portal 8.0
IBM WebSphere Portal 7.0

Successful exploitation of the vulnerability will allow attackers to perform cross site scripting attacks.

The vendor has released a fix to resolve the issue, please refer to Recommended fixes for WebSphere Application Serverfor more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

swg22004979