Medium severity5.4NVD Advisory· Published Nov 25, 2016· Updated Jun 17, 2026

CVE-2016-5981

Description

Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Filenet Workplace
cpe:2.3:a:ibm:filenet_workplace:*:*:*:*:*:*:*:*
Range: <=4.0.2.14-p8ae-if001
IBM/Filenet Workplace Xt2 versions
cpe:2.3:a:ibm:filenet_workplace_xt:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:filenet_workplace_xt:*:*:*:*:*:*:*:*range: <=1.1.5.2-wpxt-la011
- (no CPE)range: <=1.1.5.2-WPXT-LA011
IBM/Filenet P8 Application Enginellm-create
Range: <=4.0.2.14-P8AE-IF001

Patches

Vulnerability mechanics

References

www-01.ibm.com/support/docview.wssnvdMitigationVendor Advisory
www.securityfocus.com/bid/94517nvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000