Security Bulletin: IBM Security Access Manager appliances are affected by cross-site scripting vulnerabilities (CVE-2016-3018)

Summary IBM Security Access Manager appliances are vulnerable to cross-site scripting attacks. Vulnerability Details CVEID: CVE-2016-3018 DESCRIPTION: IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...

CVE-2016-3018

IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-3018

CVE-2016-3018 affects IBM Security Access Manager family. IBM’s Security Bulletin confirms cross-site scripting in IBM Security Access Manager for Web (and related appliances) that could allow an attacker to inject JavaScript into the Web UI, potentially leading to credential disclosure within a ...