CVE-2016-9704

CVE-2016-9704 affects IBM Security Identity Manager Virtual Appliance. It is a cross-site scripting vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Exploitation status is not provided in the supplied d...