CVE-2016-0255

IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 110564.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22001950Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98336Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg22001950Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98336Third Party Advisory, VDB Entry

Published

May 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0248IBM Security Guardium 9.0 before p700 and 10.0 before p100 a…
• CVE-2016-0249SQL injection vulnerability in IBM Security Guardium Databas…
• CVE-2016-0250XML external entity (XXE) vulnerability in IBM InfoSphere In…
• CVE-2016-0252IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Co…
• CVE-2016-0253Cross-site scripting (XSS) vulnerability in IBM Financial Tr…
• CVE-2016-0254IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable…
• CVE-2016-0259runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local …
• CVE-2016-0260Memory leak in queue-manager agents in IBM WebSphere MQ 8.x …
• CVE-2016-0261Cross-site scripting (XSS) vulnerability in IBM Curam Social…
• CVE-2016-0262Cross-site scripting (XSS) vulnerability in IBM Maximo Asset…
• CVE-2016-0263IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2…
• CVE-2016-0264Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK…5.6