Cross-Site Scripting Vulnerability in IBM Multi-Enterprise Integration Gateway
CVE-2016-5892
5.4MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 5 October 2016
Summary
A Cross-Site Scripting (XSS) vulnerability exists in IBM Multi-Enterprise Integration Gateway. This flaw allows remote authenticated users to inject arbitrary web scripts or HTML into the application via unspecified vectors. Successful exploitation could enable attackers to manipulate web content, steal session tokens, or perform actions on behalf of users, thereby compromising the integrity and confidentiality of sensitive information. Users of affected versions are advised to apply the necessary updates to mitigate potential security risks.
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved