PT-2016-4100 · Ibm · Ibm Marketing Platform

Publicado 2016-06-28 · Atualizado 2016-06-28 · CVE-2016-0229

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Marketing Platform versions 8.6.x through 9.1.2.1 IBM Marketing Platform versions 9.x before 9.1.2.2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious scripts on the client-side.

Recommendations For IBM Marketing Platform versions 8.6.x through 9.1.2.1, update to version 9.1.2.2 or later. For IBM Marketing Platform versions 9.x before 9.1.2.2, update to version 9.1.2.2 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-0229

Produtos afetados

Ibm Marketing Platform

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-0229 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0229 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21980989 · Aviso do Fabricante