CVE-2016-0246: XSS

Published Oct 22, 2016

Updated

Cross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected Software

7 affected components

IBM Security Guardium=8.2

IBM Security Guardium=9.0

IBM Security Guardium=9.1

IBM Security Guardium=9.5

IBM Security Guardium=10.0

IBM Security Guardium=10.1

IBM Security Guardium=10.01

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21990377

Event History

Oct 22, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0246?

The severity of CVE-2016-0246 is considered high due to the potential for remote code execution via cross-site scripting.

How do I fix CVE-2016-0246?

To fix CVE-2016-0246, apply the recommended patches or updates provided by IBM for affected versions of IBM Security Guardium.

What versions of IBM Security Guardium are affected by CVE-2016-0246?

CVE-2016-0246 affects IBM Security Guardium versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100.

Can CVE-2016-0246 be exploited through user input?

Yes, CVE-2016-0246 can be exploited by injecting arbitrary web scripts or HTML through a crafted URL.

What impact does CVE-2016-0246 have on users?

CVE-2016-0246 can lead to unauthorized access and data exposure, posing a significant risk to users of the affected software.