Cross site scripting

Cross-site scripting XSS vulnerability in IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111737...

CVE-2016-0336

IBM Security Identity Manager Virtual Appliance (ISIM VA) versions 7.0.0.0–7.0.1.0 are affected by CVE-2016-0336, a cross-site scripting (XSS) vulnerability. The issue arises from improper validation of user-supplied input, enabling remote authenticated users to inject arbitrary web script or HTM...