Cross-site Scripting Vulnerability in IBM Tivoli Integrated Portal by IBM
CVE-2016-0303

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Tivoli Integrated Portal
Vendor
CVE Published:
2 February 2018

What is CVE-2016-0303?

A cross-site scripting (XSS) vulnerability exists in IBM Tivoli Integrated Portal versions 2.2.0.0 through 2.2.0.15, enabling remote attackers to inject arbitrary web scripts or HTML into the application through unspecified attack vectors. This type of vulnerability poses a significant threat as it can lead to the execution of unauthorized commands in a user's browser, ultimately compromising user data and security. Organizations using affected versions should take immediate actions to apply security updates and mitigate potential risks.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21981591
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.