Skip to content
Sign in
Not rated

CVE-2016-9704 IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting

Description

IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product Affected versions Fixed in
Identity Manager 7.0 No fix stated
Identity Manager 7 No fix stated
Identity Manager 6.0 No fix stated
Identity Manager 6 No fix stated
Identity Manager 5.1 No fix stated
Identity Manager 5.0 No fix stated

Other CVEs of Identity Manager

The 3 CVEs of Identity Manager →
CVE-2016-9703 IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized… Not rated CVE-2016-9739 IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a… Not rated
Track this CVE