VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jun 30, 2016· Updated Jun 17, 2026

CVE-2016-0322

CVE-2016-0322

Description

Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML by uploading an HTML document.

Affected products

5
  • IBM/Connections5 versions
    cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:connections:5.5.0.0:*:*:*:*:*:*:*
    • (no CPE)range: >= 4.0 <= CR4, >= 4.5 <= CR5, >= 5.0 <= CR4, < 5.5 CR1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.