PT-2016-5301 · Ibm · Ibm Connections

Published 2016-12-01 · Updated 2016-12-01 · CVE-2016-2955

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Connections versions 5.0 before CR4 IBM Connections versions 5.5 before CR1

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For IBM Connections versions 5.0 before CR4, apply CR4 to resolve the issue. For IBM Connections versions 5.5 before CR1, apply CR1 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-2955

Affected Products

Ibm Connections

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-2955 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21988531 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-2955 · Vendor Advisory
• http://securityfocus.com/bid/92544 · Note