CVE-2016-8999: XSS

Published Feb 1, 2017

Updated

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.

Affected Software

9 affected components

IBM InfoSphere DataStage=8.7

IBM InfoSphere DataStage=9.1

IBM InfoSphere DataStage=11.3

IBM InfoSphere DataStage=11.5

IBM InfoSphere Information Server=8.7

IBM InfoSphere Information Server=9.1

IBM InfoSphere Information Server=11.3

IBM InfoSphere Information Server=11.5

IBM Infosphere Information Server On Cloud=11.5

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21995155

Event History

Feb 1, 2017

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Data Sourced

via NVD·10:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-8999?

CVE-2016-8999 is classified as a medium severity vulnerability due to the potential for CSS injection.

How do I fix CVE-2016-8999?

To fix CVE-2016-8999, ensure that all affected IBM InfoSphere DataStage and Information Server versions are updated to the latest patches provided by IBM.

Which versions are affected by CVE-2016-8999?

CVE-2016-8999 affects IBM InfoSphere DataStage versions 8.7, 9.1, 11.3, and 11.5, as well as IBM InfoSphere Information Server versions 8.7, 9.1, 11.3, and 11.5.

What is the impact of CVE-2016-8999?

The impact of CVE-2016-8999 includes the possibility for attackers to exploit the vulnerability and inject malicious CSS into the affected applications.

Is CVE-2016-8999 related to web security?

Yes, CVE-2016-8999 is related to web security as it involves a vulnerability that allows for potential CSS injection, which can affect web page rendering.