CVE-2016-8232

Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Management Module (AMM) versions earlier than 66Z of Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 allows an unauthenticated attacker with access to the AMM's IP address to send a crafted URL that could inject a malicious script to access a user's AMM data such as cookies or other session information.

• CWE-79

• http://www.securityfocus.com/bid/95839Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/121443Third Party Advisory
• https://support.lenovo.com/us/en/product_security/LEN-5700Vendor Advisory
• http://www.securityfocus.com/bid/95839Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/121443Third Party Advisory
• https://support.lenovo.com/us/en/product_security/LEN-5700Vendor Advisory

Published

Mar 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8226The BIOS in Lenovo System X M5, M6, and X6 systems allows ad…
• CVE-2016-8227Privilege escalation vulnerability in Lenovo Transition appl…
• CVE-2016-8228In Lenovo Service Bridge before version 4, a user with local…
• CVE-2016-8229A cross-site request forgery vulnerability in Lenovo Service…
• CVE-2016-8230In Lenovo Service Bridge before version 4, an insecure HTTP …
• CVE-2016-8231In Lenovo Service Bridge before version 4, a bug found in th…
• CVE-2016-8233Log files generated by Lenovo XClarity Administrator (LXCA) …
• CVE-2016-8234Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8235Privilege escalation in Lenovo Customer Care Software Develo…
• CVE-2016-8236Reset to default settings may occur in Lenovo ThinkServer TS…
• CVE-2016-8237Remote code execution in Lenovo Updates (not Lenovo System U…
• CVE-2016-8238Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…