Lucene search
IbmCVELIST:CVE-2016-6096HistoryFeb 07, 2017 - 4:00 p.m.
CVE-2016-6096
2017-02-0716:00:00
ibm
www.cve.org
4
EPSS
0.001
Percentile
30.7%
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CNA Affected
[
{
"product": "Key Lifecycle Manager",
"vendor": "IBM Corporation",
"versions": [
{
"status": "affected",
"version": "2.5"
},
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.6"
}
]
}
]Related
cve
cve
CVE-2016-6096
2017-02-07 16:59:00
prion
prion
Cross site scripting
2017-02-07 16:59:00
ibm
ibm
nvd
nvd
CVE-2016-6096
2017-02-07 16:59:00