CVE-2016-8936

State: PUBLISHED · Published: 2017-02-01 · Updated: 2024-08-06 · Assigner: ibm

Description

IBM Social Rendering Templates for Digital Data Connector is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CWE

(none)

Affected

IBM Corporation / WebSphere Portal — v=5.1.0.0 [affected]; v=5.1.0.1 [affected]; v=5.1.0.2 [affected]; v=5.1.0.3 [affected]; v=5.1.0.4 [affected]; v=5.1.0.5 [affected]; v=6.0.0.0 [affected]; v=6.0.0.1 [affected]; v=6.0.1.1 [affected]; v=6.0.1.3 [affected]; v=6.1.0.0 [affected]; v=6.0.1.5 [affected]; v=6.0.1.2 [affected]; v=6.0.1.4 [affected]; v=6.1.0.1 [affected]; v=6.1.0.2 [affected]; v=6.1.0.3 [affected]; v=6.0.1.5 build wp6015_008_01 [affected]; v=6.0.0.2 [affected]; v=6.0.0.3 [affected]; v=6.0.0.4 [affected]; v=6.0.1.0 [affected]; v=6.0.1.6 [affected]; v=6.0.1.7 [affected]; v=6.1.5.0 [affected]; v=7.0 [affected]; v=7.0.0.1 [affected]; v=8.0 [affected]; v=1.0 [affected]; v=8.0.0.1 [affected]; v=7.0.0.2 [affected]; v=6.1.0.4 [affected]; v=6.1.0.5 [affected]; v=6.1.0.6 [affected]; v=6.1.5.1 [affected]; v=6.1.5.2 [affected]; v=6.1.5.3 [affected]; v=8 [affected]; v=7 [affected]; v=6.1.5 [affected]; v=6.1.0 [affected]; v=6.0.1 [affected]; v=6.0.0 [affected]; v=8.5 [affected]; v=6.1 [affected]; v=6.0 [affected]; v=8.5.0 [affected]

CVSS

(none)

References

http://www.ibm.com/support/docview.wss?uid=swg21993895 x_refsource_CONFIRM
http://www.securityfocus.com/bid/94443 vdb-entry, x_refsource_BID

Source

cvelistV5-main/cves/2016/8xxx/CVE-2016-8936.json