CVE-2010-2433: IBM WebSphere Ilog Jrules

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow remote attackers to inject arbitrary web script or HTML via an RTS URL to (1) explore/explore.jsp, (2) compose/compose.jsp, or (3) home.jsp in faces/.

Affected products

• IBM WebSphere Ilog Jrules: version 6.7 only

Published 2010-06-24. Last modified 2026-06-16.