Medium severity5.4NVD Advisory· Published Feb 1, 2017· Updated Jun 17, 2026
CVE-2016-2924
CVE-2016-2924
Description
IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:ibm:biginsights:4.2:*:*:*:*:*:*:*
- IBM Corporation/BigInsightsv5Range: 3.0
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/95973nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.