CVE-2016-0217

IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg21996417Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95681Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg21996417Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95681Third Party Advisory, VDB Entry

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0211IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 th…
• CVE-2016-0212Stack-based buffer overflow in IBM Tivoli Storage Manager Fa…
• CVE-2016-0213Stack-based buffer overflow in IBM Tivoli Storage Manager Fa…
• CVE-2016-0214IBM Tivoli Endpoint Manager could allow a remote attacker to…
• CVE-2016-0215IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Li…
• CVE-2016-0216Stack-based buffer overflow in IBM Tivoli Storage Manager Fa…
• CVE-2016-0218IBM Cognos Business Intelligence and IBM Cognos Analytics ar…
• CVE-2016-0219XML external entity (XXE) vulnerability in IBM Rational Team…
• CVE-2016-0221Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, …
• CVE-2016-0222IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allow…
• CVE-2016-0223Cross-site scripting (XSS) vulnerability in the Webform Fram…
• CVE-2016-0224SQL injection vulnerability in IBM Marketing Platform 8.5.x,…