Vulnerability Bulletins

IBM Security Bulletin: The IBM BigFix Platform has a Cross-Site Scripting vulnerability (CVE-2016-0293 )

   
Affected software IBM
 
A .beswrpt can be injected/modified to contain malicious JavaScriptCVE(s): CVE-2016-0293Affected product(s) and affected version(s):9.0, 9.1, 9.2Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21985743X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111361

More info:

https://www.ibm.com/blogs/psirt/ibm-security-bulletin-the-ibm-bigfix-platform-has-a-cross-site-scripting-vulnerability-cve-2016-0293/