CVE-2016-0370 Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an a...
LowCVSS 2.7
EPSS 0.91%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm forms experience builder | = 8.5.0.0 | No fix listed |
| ibm forms experience builder | = 8.5.1.0 | No fix listed |
| ibm forms experience builder | = 8.5.1.1 | No fix listed |
| ibm forms experience builder | = 8.6.0.0 | No fix listed |
| ibm forms experience builder | = 8.6.1 | No fix listed |
| ibm forms experience builder | = 8.6.1.1 | No fix listed |
| ibm forms experience builder | = 8.6.2 | No fix listed |
| ibm forms experience builder | = 8.6.2.1 | No fix listed |
References
- LO88449 not-applicable vendor-advisory
- LO88451 broken-link vendor-advisory
- www-01.ibm.com patch vendor-advisory
- 92471 vdb-entry