CVE-2011-1360: Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSp...

Security readout for executives and security teams

This is an old IBM HTTP Server cross-site scripting issue in bundled documentation pages. If those pages are reachable, an attacker may cause a victim’s browser to run injected script or HTML. The supplied sources do not provide CVSS, confirmed exploit status, or detailed fix text. Exposure is most likely in legacy IBM HTTP Server deployments where the affected documentation directories are present and reachable. WebSphere environments may be relevant if they include the affected IBM HTTP Server component. Prioritize if legacy IBM HTTP Server or WebSphere systems expose documentation pages to users or the internet. Urgency is lower if the component is absent or documentation paths are unavailable, but age and incomplete asset records can hide exposure. Mitigation focus: Review IBM advisory swg21502580 and APAR PM41293 for vendor remediation guidance.; Upgrade or remediate IBM HTTP Server 2.0.47 and earlier where present.; Restrict or remove public access to affected documentation directories if not required..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.