Return to CVE list

CVE-2016-0316

5.4
Medium

CVE-2016-0316

psirt@us.ibm.com
Modified
View on MITREFind on GitHub

Description

Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

psirt@us.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg21983137
psirt@us.ibm.com
http://www.securityfocus.com/bid/92472
af854a3a-2127-422b-91ae-364da2661108
http://www-01.ibm.com/support/docview.wss?uid=swg21983137
af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/92472