CVE-2016-9980: XSS
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120256.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9980?
CVE-2016-9980 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2016-9980?
To fix CVE-2016-9980, ensure to apply the latest security updates provided by IBM for the affected versions of IBM Curam Social Program Management.
Which versions of IBM Curam Social Program Management are affected by CVE-2016-9980?
CVE-2016-9980 affects IBM Curam Social Program Management versions 5.2, 6.0, 7.0, and specific service packs within these versions.
What vulnerabilities does CVE-2016-9980 expose users to?
CVE-2016-9980 exposes users to the risk of arbitrary JavaScript execution leading to potential credential disclosure in trusted sessions.
Who is responsible for responding to CVE-2016-9980?
IBM is responsible for providing patches and updates in response to CVE-2016-9980.