CVE-2016-8975

IBM Rhapsody DM 5.0–6.0 is affected by a cross‑site scripting vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. The issue arises from improper input handling in the Web UI, enabling arbitrary JavaScript execution. Remediation per the IBM bulletins is to...