Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error messages such as DTWP001E.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Net.data | Ibm | 7.0 (including) | 7.0 (including) |
| Net.data | Ibm | 7.2 (including) | 7.2 (including) |