CVE-2016-8232 in IBM BladeCenterinformation

Résumé

par MITRE

Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Management Module (AMM) versions earlier than 66Z of Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 allows an unauthenticated attacker with access to the AMM's IP address to send a crafted URL that could inject a malicious script to access a user's AMM data such as cookies or other session information.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Réserver

16/09/2016

Divulgation

01/03/2017

Modérer

accepté

Entrée

VDB-97401

CPE

prêt

EPSS

0.01433

KEV

non

Activités

très faible

Sources

Interested in the pricing of exploits?

See the underground prices here!