CVE-2016-0927: XSS
Published Sep 18, 2016
·Updated
Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
16 affected components
Pivotal Software Cloud Foundry Elastic Runtime=1.6.0
Pivotal Software Cloud Foundry Elastic Runtime=1.6.1
Pivotal Software Cloud Foundry Elastic Runtime=1.6.2
Pivotal Software Cloud Foundry Elastic Runtime=1.6.3
Pivotal Software Cloud Foundry Elastic Runtime=1.6.4
Pivotal Software Cloud Foundry Elastic Runtime=1.6.5
Pivotal Software Cloud Foundry Elastic Runtime=1.6.6
Pivotal Software Cloud Foundry Elastic Runtime=1.6.7
Pivotal Software Cloud Foundry Elastic Runtime=1.6.8
Pivotal Software Cloud Foundry Elastic Runtime=1.6.9
Pivotal Software Cloud Foundry Elastic Runtime=1.6.10
Pivotal Software Cloud Foundry Elastic Runtime=1.6.11
Pivotal Software Cloud Foundry Elastic Runtime=1.6.12
Pivotal Software Cloud Foundry Elastic Runtime=1.6.13
Pivotal Software Cloud Foundry Elastic Runtime=1.6.14
Pivotal Software Cloud Foundry Elastic Runtime=1.6.15
Event History
Sep 18, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0927?
CVE-2016-0927 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2016-0927?
To remediate CVE-2016-0927, upgrade to Pivotal Cloud Foundry Ops Manager version 1.6.17 or later.
3
What types of attacks can exploit CVE-2016-0927?
CVE-2016-0927 can be exploited to inject arbitrary web scripts or HTML, leading to user data exposure or session hijacking.
4
Which versions of Pivotal Cloud Foundry are affected by CVE-2016-0927?
CVE-2016-0927 affects multiple versions of Pivotal Cloud Foundry Elastic Runtime from 1.6.0 to 1.6.15.
5
Is CVE-2016-0927 a serious threat to my applications?
Yes, CVE-2016-0927 poses a serious threat as it can lead to significant security breaches if exploited.