CVE-2016-5984

Published: Feb 1, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks.

Affected (5)

Products: Ibm: Infosphere Information Server, Infosphere Information Server On Cloud

Ibm

2 products

Infosphere Information Server

Infosphere Information Server On Cloud

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Information Server	Version 11.3
Ibm Infosphere Information Server	Version 11.5
Ibm Infosphere Information Server	Version 8.7
Ibm Infosphere Information Server	Version 9.1
Ibm Infosphere Information Server On Cloud	Version 11.5