CWE Code: 79
Vulnerability Type: privilege_escalation
CVSS Score: 3.5
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: cross-site scripting (xss) vulnerability in the web ui in ibm security privileged identity manager (ispim) virtual appliance 2.x before 2.0.2 fp8 allows remote authenticated users to inject arbitrary web script or html via an embedded string.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2016-09-26
Last Modified Date: 2016-09-28