Medium severity5.4NVD Advisory· Published Mar 27, 2017· Updated Jun 17, 2026
CVE-2016-6056
CVE-2016-6056
Description
IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000442.
Affected products
4cpe:2.3:a:ibm:call_center_for_commerce:9.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:call_center_for_commerce:9.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:call_center_for_commerce:9.4:*:*:*:*:*:*:*
- (no CPE)range: 9.3, 9.4
- IBM Corporation/Call Center for Commercev5Range: 9.3
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/96975nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.