CVE-2016-3042
MEDIUMIBM Websphere Application Server - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving OpenID Connect clients.
Scores
CVSS v3
5.4
EPSS
0.0020
EPSS Percentile
41.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Classification
CWE
CWE-79
Status
published
Affected Products (2)
ibm/websphere_application_server
n/a/n/a
Timeline
Published
Oct 01, 2016
Tracked Since
Feb 18, 2026