CVE-2016-8999

Published: Feb 1, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks mode thereby facilitating an attacker to inject malicious CSS.

Affected (9)

Products: Ibm: Infosphere Datastage, Infosphere Information Server, Infosphere Information Server On Cloud

Ibm

3 products

Infosphere Datastage

Infosphere Information Server

Infosphere Information Server On Cloud

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Datastage	Version 11.3
Ibm Infosphere Datastage	Version 11.5
Ibm Infosphere Datastage	Version 8.7
Ibm Infosphere Datastage	Version 9.1
Ibm Infosphere Information Server	Version 11.3
Ibm Infosphere Information Server	Version 11.5
Ibm Infosphere Information Server	Version 8.7
Ibm Infosphere Information Server	Version 9.1
Ibm Infosphere Information Server On Cloud	Version 11.5