CVE-2012-4851: IBM WebSphere Application Server

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.

Affected products

• IBM WebSphere Application Server: up to and including 8.5.0.0

Published 2012-11-14. Last modified 2026-06-16.