CVE-2016-8999

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

5.4MEDIUM

EPSS

0.3%

top 49.60%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Corporation Infosphere Information Server IBM Infosphere Datastage IBM Infosphere Information Server +1 more

Timeline

PublishedFeb 1

Latest updateMay 17

Description

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages4 packages

▶NVDibm/infosphere_information_server4 versions+3

▶CVEListV5ibm_corporation/infosphere_information_server13 versions+12

▶NVDibm/infosphere_information11.5

▶NVDibm/infosphere_datastage4 versions+3

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-2r9p-x5v3-jc5q: IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode there↗2022-05-17

▶

CVEList

CVE-2016-8999: IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode there↗2017-02-01

▶