Cross-Site Scripting Vulnerability in IBM Marketing Platform
CVE-2016-0229

6.1MEDIUM

Key Information:

Vendor

IBM
Status
Marketing Platform
Vendor
CVE Published:
28 June 2016

What is CVE-2016-0229?

An XSS vulnerability exists in IBM Marketing Platform versions 8.6.x and 9.x prior to 9.1.2.2, allowing attackers to inject arbitrary web scripts or HTML through a specially crafted URL. This vulnerability can lead to unauthorized access to sensitive information and can compromise user sessions, making it crucial for users to implement necessary security patches and updates.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21980989
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.