CVE-2016-6056: Improper Neutralization of Input During Web Page Generation

IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 2000442...

PT-2017-8872

Name of the Vulnerable Software and Affected Versions IBM Call Center for Commerce versions 9.3 through 9.4 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...