CVE-2016-0280

Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework and InfoSphere Information Server Business Glossary 9.1 before 9.1.2.0, Information Server Framework and InfoSphere Information Governance Catalog 11.3 before 11.3.1.2, and Information Server Framework and InfoSphere Information Governance Catalog 11.5 before 11.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR55452Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21981766Mitigation, Patch, VDB Entry, Vendor Advisory
• http://www.securityfocus.com/bid/92133
• http://www.securitytracker.com/id/1036418
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR55452Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21981766Mitigation, Patch, VDB Entry, Vendor Advisory
• http://www.securityfocus.com/bid/92133
• http://www.securitytracker.com/id/1036418

Published

Aug 8, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0274IBM Financial Transaction Manager (FTM) for ACH Services for…
• CVE-2016-0275IBM Financial Transaction Manager (FTM) for ACH Services for…
• CVE-2016-0276IBM Financial Transaction Manager (FTM) for ACH Services for…
• CVE-2016-0277Heap-based buffer overflow in the KeyView PDF filter in IBM …
• CVE-2016-0278Heap-based buffer overflow in the KeyView PDF filter in IBM …
• CVE-2016-0279Heap-based buffer overflow in the KeyView PDF filter in IBM …
• CVE-2016-0281The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VI…
• CVE-2016-0282Cross-site scripting (XSS) vulnerability in IBM iNotes befor…
• CVE-2016-0283Cross-site scripting (XSS) vulnerability in the OpenID Conne…
• CVE-2016-0284The XML parser in IBM Rational Collaborative Lifecycle Manag…
• CVE-2016-0285Cross-site scripting (XSS) vulnerability in IBM Rational Col…
• CVE-2016-0286IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-B…