CVE-2016-0243: XSS
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0244.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0243?
CVE-2016-0243 is classified as a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2016-0243?
To fix CVE-2016-0243, update to a patched version of IBM WebSphere Portal, specifically versions 6.1.0.7 or later, 6.1.5.4 or later, 7.0.0.3 or later, 8.0.0.1 or later, or 8.5.0.0 or later.
What versions of IBM WebSphere Portal are affected by CVE-2016-0243?
CVE-2016-0243 affects IBM WebSphere Portal versions 6.1.0.x up to 6.1.0.6, 6.1.5.x up to 6.1.5.3, and versions 7.x, 8.0.x, and 8.5.x prior to their respective fixed releases.
Who can exploit the CVE-2016-0243 vulnerability?
CVE-2016-0243 can be exploited by remote attackers who are able to craft malicious URLs that inject arbitrary web scripts or HTML.
What are the potential impacts of CVE-2016-0243 if exploited?
Exploitation of CVE-2016-0243 may lead to session hijacking, data theft, or other malicious actions performed in the context of an authenticated user.