CVE-2016-5884: XSS

Published Feb 1, 2017

Updated

IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected Software

51 affected components

IBM Domino=8.5.1.0

IBM Domino=8.5.1.1

IBM Domino=8.5.1.2

IBM Domino=8.5.1.3

IBM Domino=8.5.1.4

IBM Domino=8.5.1.5

IBM Domino=8.5.2.0

IBM Domino=8.5.2.1

IBM Domino=8.5.2.2

IBM Domino=8.5.2.3

IBM Domino=8.5.2.4

IBM Domino=8.5.3.0

IBM Domino=8.5.3.1

IBM Domino=8.5.3.2

IBM Domino=8.5.3.3

IBM Domino=8.5.3.4

IBM Domino=8.5.3.5

IBM Domino=8.5.3.6

IBM Domino=9.0.0.0

IBM Domino=9.0.1.0

IBM Domino=9.0.1.1

IBM Domino=9.0.1.2

IBM Domino=9.0.1.3

IBM Domino=9.0.1.4

IBM Domino=9.0.1.5

IBM Domino=9.0.1.6

IBM iNotes=8.5.1.0

IBM iNotes=8.5.1.1

IBM iNotes=8.5.1.2

IBM iNotes=8.5.1.3

IBM iNotes=8.5.1.4

IBM iNotes=8.5.1.5

IBM iNotes=8.5.2.0

IBM iNotes=8.5.2.1

IBM iNotes=8.5.2.2

IBM iNotes=8.5.2.3

IBM iNotes=8.5.3.0

IBM iNotes=8.5.3.1

IBM iNotes=8.5.3.2

IBM iNotes=8.5.3.3

IBM iNotes=8.5.3.4

IBM iNotes=8.5.3.5

IBM iNotes=8.5.3.6

IBM iNotes=9.0.0.0

IBM iNotes=9.0.1.0

IBM iNotes=9.0.1.1

IBM iNotes=9.0.1.2

IBM iNotes=9.0.1.3

IBM iNotes=9.0.1.4

IBM iNotes=9.0.1.5

IBM iNotes=9.0.1.6

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21992835

Event History

Feb 1, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-5884?

CVE-2016-5884 has a medium severity rating as it allows for cross-site scripting (XSS) attacks that can lead to credential disclosure.

How do I fix CVE-2016-5884?

To fix CVE-2016-5884, you should apply the security updates provided by IBM for the affected versions of Lotus Domino and iNotes.

What are the affected versions for CVE-2016-5884?

CVE-2016-5884 affects various versions of IBM Lotus Domino and iNotes ranging from 8.5.1.0 to 9.0.1.6.

What type of attack does CVE-2016-5884 enable?

CVE-2016-5884 enables cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary JavaScript code into the web user interface.

Can CVE-2016-5884 lead to data breaches?

Yes, CVE-2016-5884 can potentially lead to data breaches by allowing attackers to compromise user credentials within trusted sessions.