CVE-2016-5974: XSS
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5974?
CVE-2016-5974 has been assigned a medium severity level due to the potential for exploitation via XSS.
How do I fix CVE-2016-5974?
To fix CVE-2016-5974, upgrade to IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 FP8 or later.
Who is affected by CVE-2016-5974?
CVE-2016-5974 affects remote authenticated users of IBM Security Privileged Identity Manager Virtual Appliance versions prior to 2.0.2 FP8.
What type of vulnerability is CVE-2016-5974?
CVE-2016-5974 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.
What can attackers achieve by exploiting CVE-2016-5974?
By exploiting CVE-2016-5974, attackers can execute malicious scripts in the context of an affected web application.