CVE-2016-0316: XSS
Published Nov 25, 2016
·Updated
Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected Software
3 affected components
IBM Jazz Reporting Service=6.0
IBM Jazz Reporting Service=6.0.1
IBM Jazz Reporting Service=6.0.2
Remediation
Patch Available
Event History
Nov 25, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0316?
CVE-2016-0316 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-0316?
To fix CVE-2016-0316, upgrade IBM Jazz Reporting Service to version 6.0.1 iFix006 or 6.0.2 iFix003 or later.
3
What software is affected by CVE-2016-0316?
CVE-2016-0316 affects IBM Jazz Reporting Service versions 6.0, 6.0.1, and 6.0.2.
4
What type of vulnerability is CVE-2016-0316?
CVE-2016-0316 is a cross-site scripting (XSS) vulnerability.
5
Who can exploit CVE-2016-0316?
CVE-2016-0316 can be exploited by remote authenticated users.