CVE-2016-2925: XSS
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2925?
CVE-2016-2925 is considered a medium severity vulnerability due to the potential for XSS attacks by an authenticated user.
How do I fix CVE-2016-2925?
To fix CVE-2016-2925, it's recommended to apply the latest patches provided by IBM for the affected versions of WebSphere Portal.
Which versions of IBM WebSphere Portal are affected by CVE-2016-2925?
CVE-2016-2925 affects IBM WebSphere Portal versions 6.1.0.x through 6.1.0.6, 6.1.5.x through 6.1.5.3, 7.x through 7.0.0.2, 8.0.0.x through 8.0.0.1, and 8.5.0 before CF10.
What type of attack can occur due to CVE-2016-2925?
CVE-2016-2925 allows for cross-site scripting (XSS) attacks, enabling remote authenticated users to inject arbitrary web scripts or HTML.
Who is primarily affected by CVE-2016-2925?
The primary affected users of CVE-2016-2925 are those using IBM WebSphere Portal where authenticated users can exploit the vulnerability.