What is the severity of CVE-2016-2938?

The severity of CVE-2016-2938 is considered high due to the potential for credential disclosure through cross-site scripting.

How do I fix CVE-2016-2938?

To fix CVE-2016-2938, apply the latest patches provided by IBM for affected versions of IBM Domino and IBM Lotus iNotes.

What versions are affected by CVE-2016-2938?

CVE-2016-2938 affects IBM Domino and IBM Lotus iNotes versions ranging from 8.5.1.0 to 9.0.1.6.

What type of vulnerability is CVE-2016-2938?

CVE-2016-2938 is a cross-site scripting (XSS) vulnerability that allows arbitrary JavaScript code to be embedded in the web interface.

Can CVE-2016-2938 allow attackers to access sensitive information?

Yes, CVE-2016-2938 can potentially lead to the disclosure of sensitive information, such as user credentials during a trusted session.

Vulnerability/
CVE-2016-2938

medium

6.1

CWE

1/2/2017

5/8/2024

CVE-2016-2938: XSS

First published: Wed Feb 01 2017(Updated: )

IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Domino	=8.5.1.0
IBM Domino	=8.5.1.1
IBM Domino	=8.5.1.2
IBM Domino	=8.5.1.3
IBM Domino	=8.5.1.4
IBM Domino	=8.5.1.5
IBM Domino	=8.5.2.0
IBM Domino	=8.5.2.1
IBM Domino	=8.5.2.2
IBM Domino	=8.5.2.3
IBM Domino	=8.5.2.4
IBM Domino	=8.5.3.0
IBM Domino	=8.5.3.1
IBM Domino	=8.5.3.2
IBM Domino	=8.5.3.3
IBM Domino	=8.5.3.4
IBM Domino	=8.5.3.5
IBM Domino	=8.5.3.6
IBM Domino	=9.0.0.0
IBM Domino	=9.0.1.0
IBM Domino	=9.0.1.1
IBM Domino	=9.0.1.2
IBM Domino	=9.0.1.3
IBM Domino	=9.0.1.4
IBM Domino	=9.0.1.5
IBM Domino	=9.0.1.6
IBM Lotus iNotes	=8.5.1.0
IBM Lotus iNotes	=8.5.1.1
IBM Lotus iNotes	=8.5.1.2
IBM Lotus iNotes	=8.5.1.3
IBM Lotus iNotes	=8.5.1.4
IBM Lotus iNotes	=8.5.1.5
IBM Lotus iNotes	=8.5.2.0
IBM Lotus iNotes	=8.5.2.1
IBM Lotus iNotes	=8.5.2.2
IBM Lotus iNotes	=8.5.2.3
IBM Lotus iNotes	=8.5.3.0
IBM Lotus iNotes	=8.5.3.1
IBM Lotus iNotes	=8.5.3.2
IBM Lotus iNotes	=8.5.3.3
IBM Lotus iNotes	=8.5.3.4
IBM Lotus iNotes	=8.5.3.5
IBM Lotus iNotes	=8.5.3.6
IBM Lotus iNotes	=9.0.0.0
IBM Lotus iNotes	=9.0.1.0
IBM Lotus iNotes	=9.0.1.1
IBM Lotus iNotes	=9.0.1.2
IBM Lotus iNotes	=9.0.1.3
IBM Lotus iNotes	=9.0.1.4
IBM Lotus iNotes	=9.0.1.5
IBM Lotus iNotes	=9.0.1.6

Remedy

http://www.ibm.com/support/docview.wss?uid=swg21992835

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-2938?
The severity of CVE-2016-2938 is considered high due to the potential for credential disclosure through cross-site scripting.
How do I fix CVE-2016-2938?
To fix CVE-2016-2938, apply the latest patches provided by IBM for affected versions of IBM Domino and IBM Lotus iNotes.
What versions are affected by CVE-2016-2938?
CVE-2016-2938 affects IBM Domino and IBM Lotus iNotes versions ranging from 8.5.1.0 to 9.0.1.6.
What type of vulnerability is CVE-2016-2938?
CVE-2016-2938 is a cross-site scripting (XSS) vulnerability that allows arbitrary JavaScript code to be embedded in the web interface.
Can CVE-2016-2938 allow attackers to access sensitive information?
Yes, CVE-2016-2938 can potentially lead to the disclosure of sensitive information, such as user credentials during a trusted session.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/remedy
agent/severity
agent/author
agent/last-modified-date
agent/references
agent/first-publish-date
agent/description
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/ibm
canonical/ibm domino
version/ibm domino/8.5.1.0
version/ibm domino/8.5.1.1
version/ibm domino/8.5.1.2
version/ibm domino/8.5.1.3
version/ibm domino/8.5.1.4
version/ibm domino/8.5.1.5
version/ibm domino/8.5.2.0
version/ibm domino/8.5.2.1
version/ibm domino/8.5.2.2
version/ibm domino/8.5.2.3
version/ibm domino/8.5.2.4
version/ibm domino/8.5.3.0
version/ibm domino/8.5.3.1
version/ibm domino/8.5.3.2
version/ibm domino/8.5.3.3
version/ibm domino/8.5.3.4
version/ibm domino/8.5.3.5
version/ibm domino/8.5.3.6
version/ibm domino/9.0.0.0
version/ibm domino/9.0.1.0
version/ibm domino/9.0.1.1
version/ibm domino/9.0.1.2
version/ibm domino/9.0.1.3
version/ibm domino/9.0.1.4
version/ibm domino/9.0.1.5
version/ibm domino/9.0.1.6
canonical/ibm lotus inotes
version/ibm lotus inotes/8.5.1.0
version/ibm lotus inotes/8.5.1.1
version/ibm lotus inotes/8.5.1.2
version/ibm lotus inotes/8.5.1.3
version/ibm lotus inotes/8.5.1.4
version/ibm lotus inotes/8.5.1.5
version/ibm lotus inotes/8.5.2.0
version/ibm lotus inotes/8.5.2.1
version/ibm lotus inotes/8.5.2.2
version/ibm lotus inotes/8.5.2.3
version/ibm lotus inotes/8.5.3.0
version/ibm lotus inotes/8.5.3.1
version/ibm lotus inotes/8.5.3.2
version/ibm lotus inotes/8.5.3.3
version/ibm lotus inotes/8.5.3.4
version/ibm lotus inotes/8.5.3.5
version/ibm lotus inotes/8.5.3.6
version/ibm lotus inotes/9.0.0.0
version/ibm lotus inotes/9.0.1.0
version/ibm lotus inotes/9.0.1.1
version/ibm lotus inotes/9.0.1.2
version/ibm lotus inotes/9.0.1.3
version/ibm lotus inotes/9.0.1.4
version/ibm lotus inotes/9.0.1.5
version/ibm lotus inotes/9.0.1.6

Frequently Asked Questions

What is the severity of CVE-2016-2938?
The severity of CVE-2016-2938 is considered high due to the potential for credential disclosure through cross-site scripting.
How do I fix CVE-2016-2938?
To fix CVE-2016-2938, apply the latest patches provided by IBM for affected versions of IBM Domino and IBM Lotus iNotes.
What versions are affected by CVE-2016-2938?
CVE-2016-2938 affects IBM Domino and IBM Lotus iNotes versions ranging from 8.5.1.0 to 9.0.1.6.
What type of vulnerability is CVE-2016-2938?
CVE-2016-2938 is a cross-site scripting (XSS) vulnerability that allows arbitrary JavaScript code to be embedded in the web interface.
Can CVE-2016-2938 allow attackers to access sensitive information?
Yes, CVE-2016-2938 can potentially lead to the disclosure of sensitive information, such as user credentials during a trusted session.

CVE-2016-2938: XSS

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-2938?

How do I fix CVE-2016-2938?

What versions are affected by CVE-2016-2938?

What type of vulnerability is CVE-2016-2938?

Can CVE-2016-2938 allow attackers to access sensitive information?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2016-2938?

How do I fix CVE-2016-2938?

What versions are affected by CVE-2016-2938?

What type of vulnerability is CVE-2016-2938?

Can CVE-2016-2938 allow attackers to access sensitive information?