Description

IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Remediation

References

CVE-2016-3018

Related Vulnerabilities

WordPress Plugin CP Contact Form with PayPal Multiple Vulnerabilities (1.1.5)

Oracle JRE CVE-2022-21366 Vulnerability (CVE-2022-21366)

CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)

WordPress Plugin PowerPack Lite for Beaver Builder Local File Inclusion (1.3.0.3)

XWikiplatform Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37901)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2016-3018