VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Feb 1, 2017· Updated May 13, 2026

CVE-2016-8999

CVE-2016-8999

Description

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.

Affected products

10
  • IBM/Infosphere Datastage4 versions
    cpe:2.3:a:ibm:infosphere_datastage:8.7:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:infosphere_datastage:8.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_datastage:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_datastage:11.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_datastage:11.5:*:*:*:*:*:*:*
  • IBM/Infosphere Information Server4 versions
    cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*
  • IBM/Infosphere Information Server On Cloud
    cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.5:*:*:*:*:*:*:*
  • IBM Corporation/InfoSphere Information Serverv5
    Range: 8.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.