CVE-2016-0336

published 2018-01-12

CVE-2016-0336: Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111737.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	security_identity_manager	—	—
ibm	security_identity_manager	—	—
ibm	security_identity_manager	—	—
ibm	security_identity_manager	—	—
ibm	security_identity_manager	—	—

CWE-79