CVE-2016-9000

Published: Feb 1, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks.

Affected (5)

Products: Ibm: Infosphere Datastage, Infosphere Information Server On Cloud

Ibm

2 products

Infosphere Datastage

Infosphere Information Server On Cloud

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Datastage	Version 11.3
Ibm Infosphere Datastage	Version 11.5
Ibm Infosphere Datastage	Version 8.7
Ibm Infosphere Datastage	Version 9.1
Ibm Infosphere Information Server On Cloud	Version 11.5