PH47531:IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336 CVSS 5.4)

Download

Downloadable File

File link	File size	File description

Abstract

IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336 CVSS 5.4)

Download Description

View the Security Bulletin

PH47531 resolves the following problem:

ERROR DESCRIPTION:
IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336 CVSS 5.4)

PROBLEM SUMMARY:
IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336 CVSS 5.4)

PROBLEM CONCLUSION:
Confidential for CVE-2022-34336.

The fix for this APAR is currently targeted for inclusion in fix packs 8.5.5.23 and 9.0.5.14.

For more information, see 'Recommended Updates for WebSphere Application Server': http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Prerequisites

Download the UpdateInstaller below to install this fix for 7.0.

URL	SIZE (Bytes)
UpdateInstaller	7250000

Installation Instructions

Review the readme.txt for detailed installation instructions.

URL	SIZE (Bytes)
V70 readme file	4891
V80 readme file	2178
V85 readme file	2401
V90 readme file	2316

Download Package

DOWNLOAD	RELEASE DATE	SIZE (Bytes)	URL Fix Central (FC) help
7.0.0.45-WS-WAS-IFPH47531	24 August 2022	13636	FC
8.0.0.15-WS-WASProd-IFPH47531	24 August 2022	265293	FC
8.5.5.0-WS-WASProd-IFPH47531	24 August 2022	296221	FC
9.0.0.0-WS-WASProd-IFPH47531	24 August 2022	299918	FC

Problems Solved

PH47531

Technical Support

Contact IBM Support at https://www.ibm.com/mysupport/ or 1-800-IBM-SERV (US only).

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Component":"General","Platform":[{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"},{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"}],"Version":"8.5.5.16;8.5.5.15;8.5.5.14;8.5.5.13;8.5.5.12;8.5.5.11;8.5.5.10;8.5.5.9;7.0.0.45;8.0.0.15;8.5.5.22;8.5.5.21;8.5.5.20;8.5.5.19;8.5.5.18;8.5.5.17;9.0.5.11;9.0.5.10;9.0.5.9;9.0.5.8;9.0.5.7;9.0.5.6;9.0.5.5;9.0.5.4;9.0.5.3;9.0.5.2;9.0.5.1;9.0.5.0;9.0.0.11;9.0.0.10;9.0.0.9;9.0.0.8;9.0.0.7;9.0.0.6;9.0.0.5;9.0.0.4;8.5.5.8;8.5.5.7;8.5.5.6;8.5.5.5;8.5.5.4;8.5.5.3;8.5.5.2;8.5.5.1;8.5.5;8.5.0.2;8.5.0.1;8.5;9.0.5.13;9.0.5.12;9.0.0.3;9.0.0.2;9.0.0.1;9.0.0.0","Edition":"Base","Line of Business":{"code":"LOB45","label":"Automation"}}]

Problems (APARS) fixed
PH47531

Was this topic helpful?

Document Information

Modified date:
12 September 2022

UID

ibm16615203

Tips