CVE-2016-0322: XSS
First published: Thu Jun 30 2016(Updated: )
Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML by uploading an HTML document.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Connections Portlets | =4.0.0.0 | |
| IBM Connections Portlets | =4.5.0.0 | |
| IBM Connections Portlets | =5.0.0.0 | |
| IBM Connections Portlets | =5.5.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-0322?
CVE-2016-0322 has a medium severity rating as it allows authenticated users to perform cross-site scripting attacks.
How do I fix CVE-2016-0322?
To fix CVE-2016-0322, upgrade to the latest version of IBM Connections that addresses this vulnerability.
What are the affected versions for CVE-2016-0322?
The affected versions for CVE-2016-0322 include IBM Connections versions 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1.
Who can exploit CVE-2016-0322?
CVE-2016-0322 can be exploited by remote authenticated users who have the ability to upload HTML documents.
What type of vulnerability is CVE-2016-0322?
CVE-2016-0322 is classified as a cross-site scripting (XSS) vulnerability.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/weakness
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm connections portlets
- version/ibm connections portlets/4.0.0.0
- version/ibm connections portlets/4.5.0.0
- version/ibm connections portlets/5.0.0.0
- version/ibm connections portlets/5.5.0.0