Cross-Site Scripting Vulnerability in IBM Tealeaf Customer Experience
CVE-2016-5978

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Tealeaf Customer Experience
Vendor
CVE Published:
26 September 2016

What is CVE-2016-5978?

The identified vulnerability in IBM Tealeaf Customer Experience allows remote authenticated users to exploit the web interface. This security flaw enables attackers to inject arbitrary web scripts or HTML through an embedded string, posing serious risks to user data integrity and application security. Users are urged to implement patches and updates provided by IBM to ensure system security.

References

http://www.securityfocus.com/bid/93140
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg21990216
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.