A vulnerability has been reported in IBM WebSphere Edge Server, which can be exploited by malicious people to conduct cross-site scripting attacks.

Certain unspecified input is not properly sanitised before being returned to a user via an error page from the proxy server. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Successful exploitation requires that CGI mapping rules are enabled.

Solution
Fixed in CP efix levels 6.1.0.15, 6.0.2.26, and 5.1.1.38.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21294776

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers