Skip to content
OpenAdvisories
Unscored CVE-2016-2992 EUVD-2016-4065GHSA-j5xj-fwqx-pw8f

IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…

Published Feb 1, 2017 · Updated Aug 5, 2024 · Assigned by ibm

Description

IBM Infosphere BigInsights is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

VendorProductAffectedFixed
IBM BigInsights 3.0, 3.0.0.1, 3.0.0.2, 1.1.0, 1.2.0, 1.3.0, 1.4.0, 2.0.0, 2.1.0, 2.1.1, 2.1.2, 4.0.0, 4.1.0, 4.2.0 —

References