CVE-2016-9718

5.4 mediumEPSS 0.7%

IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119732.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-07-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:infosphere_master_data_management_server

References

http://www.ibm.com/support/docview.wss?uid=swg22006606
http://www.securityfocus.com/bid/100016
https://exchange.xforce.ibmcloud.com/vulnerabilities/119732
http://www.ibm.com/support/docview.wss?uid=swg22006606
http://www.securityfocus.com/bid/100016

Check your stack JSON