Cross-Site Scripting Vulnerability in IBM Multi-Enterprise Integration Gateway
CVE-2016-5892

5.4MEDIUM

Key Information:

Vendor: IBM
Status: Multi-enterprise Integration Gateway
Vendor: CVE Published:; 5 October 2016

Summary

A Cross-Site Scripting (XSS) vulnerability exists in IBM Multi-Enterprise Integration Gateway. This flaw allows remote authenticated users to inject arbitrary web scripts or HTML into the application via unspecified vectors. Successful exploitation could enable attackers to manipulate web content, steal session tokens, or perform actions on behalf of users, thereby compromising the integrity and confidentiality of sensitive information. Users of affected versions are advised to apply the necessary updates to mitigate potential security risks.

References

http://www.securityfocus.com/bid/93277

vdb-entryx_refsource_BID

http://www-01.ibm.com/support/docview.wss?uid=swg21991148

x_refsource_CONFIRM

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Oct 5, 2016
Vulnerability Reserved
Jun 29, 2016