CVE-2016-9990

IBM iNotes 8.5 and 9.0 are vulnerable to cross-site scripting via the Web UI, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. Affected product: IBM iNotes Web UI. Root cause: reflected/stored XSS in the Web UI (exact mechanism not ...