Medium severity5.4NVD Advisory· Published Feb 8, 2017· Updated May 13, 2026
CVE-2016-0305
CVE-2016-0305
Description
IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Affected products
1- Range: 4.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/92436nvd
News mentions
0No linked articles in our index yet.