CVE-2016-0370

Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg1LO88449Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO88451Broken Link
• http://www-01.ibm.com/support/docview.wss?uid=swg21988726Patch, Vendor Advisory
• http://www.securityfocus.com/bid/92471
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO88449Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO88451Broken Link
• http://www-01.ibm.com/support/docview.wss?uid=swg21988726Patch, Vendor Advisory
• http://www.securityfocus.com/bid/92471

Published

Sep 1, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0363The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java…
• CVE-2016-0364IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1…
• CVE-2016-0365IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1…
• CVE-2016-0366IBM Security Identity Manager Virtual Appliance 7.0.x before…
• CVE-2016-0367IBM Security Identity Manager Virtual Appliance 7.0.x before…
• CVE-2016-0369XML external entity (XXE) vulnerability in IBM Forms Experie…
• CVE-2016-0371The Tivoli Storage Manager (TSM) password may be displayed i…5.5
• CVE-2016-0372IBM Rational Collaborative Lifecycle Management 3.0.1.6 befo…
• CVE-2016-0373IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an auth…3.1
• CVE-2016-0374The builder tools in IBM TRIRIGA Application Platform 3.3 be…
• CVE-2016-0375JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x …
• CVE-2016-0376The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, …