NetSight
medium6.1

CVE-2016-0293

Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attack…

Impact

Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary web script or HTML via a modified .beswrpt file.

Affected products

VendorProductAffected versions
IbmBigfix Platform
Versions 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.2.5

Weakness classification

References