CVE-2016-0280

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
5.4MEDIUM
EPSS
0.2%
top 64.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
IBM Information Server FrameworkIBM Infosphere Information Governance CatalogIBM Infosphere Information Server Business Glossary
Timeline
PublishedAug 8
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework and InfoSphere Information Server Business Glossary 9.1 before 9.1.2.0, Information Server Framework and InfoSphere Information Governance Catalog 11.3 before 11.3.1.2, and Information Server Framework and InfoSphere Information Governance Catalog 11.5 before 11.5.0.1 allows remote authentic…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages3 packages

▶NVDibm/information5 versions+4

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2vjj-7xrm-qchx: Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8↗2022-05-17
▶
CVEList
CVE-2016-0280: Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8↗2016-08-08
▶
CVE-2016-0280 (MEDIUM CVSS 5.4) | Cross-site scripting (XSS) vulnerab | cvebase.io