Cross-Site Scripting Vulnerability in IBM FileNet Workplace Products
CVE-2016-5981

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Filenet Workplace
Filenet Workplace Xt
Vendor
CVE Published:
25 November 2016

Summary

A cross-site scripting (XSS) vulnerability exists in IBM FileNet Workplace XT and FileNet Workplace (Application Engine) due to improper configuration of the RegExpSecurityFilter and ScriptSecurityFilter. This misconfiguration permits remote attackers to inject arbitrary web scripts or HTML through various vectors, potentially leading to unauthorized actions or data breaches.

References

http://www.securityfocus.com/bid/94517
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg21990899
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.