CVE-2016-9718: XSS

Published Jul 31, 2017

Updated

IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119732.

Affected Software

6 affected components

IBM InfoSphere Master Data Management Server=10.1

IBM InfoSphere Master Data Management Server=11.0

IBM InfoSphere Master Data Management Server=11.3

IBM InfoSphere Master Data Management Server=11.4

IBM InfoSphere Master Data Management Server=11.5

IBM InfoSphere Master Data Management Server=11.6

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22006606

Event History

Jul 31, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-9718?

CVE-2016-9718 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2016-9718?

To remediate CVE-2016-9718, ensure that you apply the latest patches provided by IBM for the affected versions of InfoSphere Master Data Management Server.

What versions of IBM InfoSphere Master Data Management Server are affected by CVE-2016-9718?

CVE-2016-9718 affects IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6.

What type of attack is possible due to CVE-2016-9718?

CVE-2016-9718 allows for cross-site scripting attacks, enabling attackers to inject arbitrary JavaScript code into the Web UI.

What are the potential consequences of exploiting CVE-2016-9718?

Exploiting CVE-2016-9718 could lead to the disclosure of user credentials and other sensitive information.