IBM WebSphere Application Server for z/OS Multiple Vulnerabilities

IBM WebSphere Application Server (WAS) for z/OS is prone to a cross-site scripting issue and a file-permission security issue. An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. The attacker can exploit the file-permission issue to gain write access to certain files, which could affect system integrity and lead to other attacks. These issues affect WAS 7.0 for z/OS.