CVE-2016-9718: XSS
First published: Mon Jul 31 2017(Updated: )
IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119732.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM InfoSphere Master Data Management Collaborative Server | =10.1 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.0 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.3 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.4 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.5 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-9718?
CVE-2016-9718 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2016-9718?
To remediate CVE-2016-9718, ensure that you apply the latest patches provided by IBM for the affected versions of InfoSphere Master Data Management Server.
What versions of IBM InfoSphere Master Data Management Server are affected by CVE-2016-9718?
CVE-2016-9718 affects IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6.
What type of attack is possible due to CVE-2016-9718?
CVE-2016-9718 allows for cross-site scripting attacks, enabling attackers to inject arbitrary JavaScript code into the Web UI.
What are the potential consequences of exploiting CVE-2016-9718?
Exploiting CVE-2016-9718 could lead to the disclosure of user credentials and other sensitive information.
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/remedy
- agent/softwarecombine
- agent/type
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm infosphere master data management collaborative server
- version/ibm infosphere master data management collaborative server/10.1
- version/ibm infosphere master data management collaborative server/11.0
- version/ibm infosphere master data management collaborative server/11.3
- version/ibm infosphere master data management collaborative server/11.4
- version/ibm infosphere master data management collaborative server/11.5
- version/ibm infosphere master data management collaborative server/11.6