3.5
CVSSv2

CVE-2016-0265

Published: 01/02/2017 Updated: 05/02/2017
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

IBM Campaign is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm campaign 9.1.2

ibm campaign 9.1.1

ibm campaign 9.1

ibm campaign 8.6