CVE-2016-6062

IBM Resilient v26.0, v26.1, and v26.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference#: 213457065.

• CWE-79

• http://www.securityfocus.com/bid/94268Third Party Advisory, VDB Entry
• https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-resilient-cross-site-scripting-vulnerability-cve-2016-6062/Vendor Advisory
• http://www.securityfocus.com/bid/94268Third Party Advisory, VDB Entry
• https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-resilient-cross-site-scripting-vulnerability-cve-2016-6062/Vendor Advisory

Published

Feb 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6054IBM Jazz Foundation is vulnerable to cross-site scripting. T…
• CVE-2016-6055IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vuln…
• CVE-2016-6056IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cr…
• CVE-2016-6059IBM InfoSphere Information Server is vulnerable to a denial …
• CVE-2016-6060An undisclosed vulnerability in IBM Rational DOORS Next Gene…
• CVE-2016-6061IBM Jazz Foundation is vulnerable to cross-site scripting. T…
• CVE-2016-6065IBM Security Guardium Database Activity Monitor appliance co…
• CVE-2016-6068IBM UrbanCode Deploy could allow an authenticated user with …
• CVE-2016-6072IBM Maximo Asset Management is vulnerable to cross-site scri…
• CVE-2016-6077IBM Cognos Disclosure Management 10.2 could allow a maliciou…
• CVE-2016-6079IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulne…
• CVE-2016-6080The WebAdmin context for WebSphere Message Broker allows dir…