IBM WebSphere Application Server versions 8.5 and 9.0 traditional are affected by a cross-site scripting (XSS) vulnerability that could allow a remote attacker to execute malicious scripts. The vulnerability has a CVSS score of 6.1, indicating a medium severity level. No specific affected versions or patch information is provided in the available data.