CVE-2006-2431

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-17 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as "faultfactor," but this is likely erroneous.

Affected products

IBM WebSphere Application Server: 5.0.0, 5.0.1, 5.0.2, 5.1.0, 5.1.0.2, 5.1.0.3 (+14)

References

http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
http://secunia.com/advisories/20032
http://securityreason.com/securityalert/910
http://securitytracker.com/id?1017170
http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang=
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012163
http://www-1.ibm.com/support/search.wss?rs=0&q=PK16602&apar=only
http://www-1.ibm.com/support/search.wss?rs=0&q=PK26181&apar=only
http://www.attrition.org/pipermail/vim/2006-November/001112.html
http://www.niscc.gov.uk/niscc/docs/re-20061031-00727.pdf?lang=en
http://www.osvdb.org/25371

Get alerted when CVE-2006-2431 or the next vulnerability affects your stack