Skip to content
OpenAdvisories
Unscored CVE-2016-5888 EUVD-2016-6822GHSA-7377-52fm-xwq2

IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c…

Published May 10, 2017 · Updated Aug 6, 2024 · Assigned by ibm

Vendor: IBM Product: Interact

Description

IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 115084.

Affected products

VendorProductAffectedFixed
IBM Interact 10.0, 8.6, 9.0, 9.1, 9.1.1, 9.1.2 —

References