Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Referenceshttp://secunia.com/advisories/41722http://www-01.ibm.com/support/docview.wss?uid=swg27004980http://www.vupen.com/english/advisories/2010/2595http://www.securityfocus.com/bid/43874https://exchange.xforce.ibmcloud.com/vulnerabilities/62948http://www-01.ibm.com/support/docview.wss?uid=swg1PM23872http://www-01.ibm.com/support/docview.wss?uid=swg27014463http://www-01.ibm.com/support/docview.wss?uid=swg1PM17046