Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-9000

IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Corporation InfoSphere Information Server

  • 8.1affected
  • 8.5affected
  • 8.0affected
  • 8.5.0.1affected
  • 8.7affected
  • 9.1affected
  • 8.0.1affected
  • 10.0affected
  • 11.3affected
  • 10affected
  • 11.3.0.0affected
  • 11.3.1.0affected
  • 11.5affected

References