IBM Worklight Enterprise Edition and IBM MobileFirst Platform Foundation versions 6.1, 6.2, 6.3, 7.0, 7.1, and 8.0 suffer from an oauth server web api cross site scripting vulnerability.
ac2c77a8bdb6c370f45b4b0b66378e012aabed585ad9569f4b364a073cc1ba62