What is the severity of CVE-2016-5975?

CVE-2016-5975 is classified as a Cross-site Scripting (XSS) vulnerability, which can potentially allow attackers to execute malicious scripts in the context of a user's browser.

How do I fix CVE-2016-5975?

To fix CVE-2016-5975, upgrade to IBM Tealeaf Customer Experience versions 8.7.1.8847 FP10, 8.8.0.9049 FP9, or any of the later specified versions.

What are the affected versions for CVE-2016-5975?

CVE-2016-5975 affects IBM Tealeaf Customer Experience versions up to 8.7, version 8.8, 9.0.0, 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224.

What type of vulnerability is CVE-2016-5975?

CVE-2016-5975 is a Cross-site Scripting (XSS) vulnerability that affects the web portal of IBM Tealeaf Customer Experience.

Can CVE-2016-5975 affect my web applications?

Yes, if you are using the affected versions of IBM Tealeaf Customer Experience, CVE-2016-5975 can be exploited to compromise the security of your web applications.

Vulnerability/
CVE-2016-5975

medium

5.4

CWE

26/9/2016

6/8/2024

CVE-2016-5975: XSS

First published: Mon Sep 26 2016(Updated: )

Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5978.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Tealeaf CX	<=8.7
IBM Tealeaf CX	=8.8
IBM Tealeaf CX	=9.0.0
IBM Tealeaf CX	=9.0.1
IBM Tealeaf CX	=9.0.1a
IBM Tealeaf CX	=9.0.2
IBM Tealeaf CX	=9.0.2a

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-5975?
CVE-2016-5975 is classified as a Cross-site Scripting (XSS) vulnerability, which can potentially allow attackers to execute malicious scripts in the context of a user's browser.
How do I fix CVE-2016-5975?
To fix CVE-2016-5975, upgrade to IBM Tealeaf Customer Experience versions 8.7.1.8847 FP10, 8.8.0.9049 FP9, or any of the later specified versions.
What are the affected versions for CVE-2016-5975?
CVE-2016-5975 affects IBM Tealeaf Customer Experience versions up to 8.7, version 8.8, 9.0.0, 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224.
What type of vulnerability is CVE-2016-5975?
CVE-2016-5975 is a Cross-site Scripting (XSS) vulnerability that affects the web portal of IBM Tealeaf Customer Experience.
Can CVE-2016-5975 affect my web applications?
Yes, if you are using the affected versions of IBM Tealeaf Customer Experience, CVE-2016-5975 can be exploited to compromise the security of your web applications.

agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/author
agent/severity
agent/first-publish-date
agent/event
agent/description
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/ibm
canonical/ibm tealeaf cx
version/ibm tealeaf cx/8.7
version/ibm tealeaf cx/8.8
version/ibm tealeaf cx/9.0.0
version/ibm tealeaf cx/9.0.1
version/ibm tealeaf cx/9.0.1a
version/ibm tealeaf cx/9.0.2
version/ibm tealeaf cx/9.0.2a

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.