CVE-2016-9979: XSS
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120255.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9979?
CVE-2016-9979 has a medium severity rating due to the potential for cross-site scripting attacks leading to credential disclosure.
How do I fix CVE-2016-9979?
To fix CVE-2016-9979, update IBM Curam Social Program Management to versions 6.0.5.9, 6.1.1.x, or later.
What versions of IBM Curam Social Program Management are affected by CVE-2016-9979?
Versions 5.2, 6.0.4.0 through 6.0.5.9, and 6.1.0.0 through 6.2.0.3 of IBM Curam Social Program Management are affected.
Is CVE-2016-9979 related to any other vulnerabilities?
CVE-2016-9979 is a standalone vulnerability centered on cross-site scripting and does not directly correlate with other vulnerabilities.
What are the risks associated with CVE-2016-9979?
The risks of CVE-2016-9979 include unauthorized execution of scripts, leading to potential credential theft and compromised user sessions.