CVE-2016-2924

IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg21987499Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95973Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg21987499Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95973Third Party Advisory, VDB Entry

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2908IBM Single Sign On for Bluemix could allow a remote attacker…
• CVE-2016-2912Cross-site scripting (XSS) vulnerability in the Document Bui…
• CVE-2016-2914Unrestricted file upload vulnerability in the Document Build…
• CVE-2016-2917The notifications component in IBM TRIRIGA Applications 10.4…
• CVE-2016-2922IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through …3.7
• CVE-2016-2923IBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 L…
• CVE-2016-2925Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2016-2926Cross-site scripting (XSS) vulnerability in IBM Rational Col…
• CVE-2016-2927IBM BigFix Remote Control before 9.1.3 does not properly res…
• CVE-2016-2928IBM BigFix Remote Control before 9.1.3 allows remote authent…
• CVE-2016-2929IBM BigFix Remote Control before 9.1.3 does not properly res…
• CVE-2016-2930IBM BigFix Remote Control 9.1.3 could allow a remote attacke…