CVE-2016-8922: XSS
Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8922?
CVE-2016-8922 is rated as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2016-8922?
To address CVE-2016-8922, ensure you apply the latest security patches from IBM for the affected versions of Web Content Manager and WebSphere Portal.
What types of applications are impacted by CVE-2016-8922?
CVE-2016-8922 affects IBM Web Content Manager version 4.0 and IBM WebSphere Portal versions 8.0 and 8.5.
What kind of attack can CVE-2016-8922 facilitate?
CVE-2016-8922 can facilitate cross-site scripting attacks, enabling the execution of arbitrary JavaScript code in a user's browser.
Is user data at risk due to CVE-2016-8922?
Yes, CVE-2016-8922 can lead to the disclosure of user credentials within a trusted session if exploited.