CVE-2016-9000

IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg21995257Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95324Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037564
• http://www.ibm.com/support/docview.wss?uid=swg21995257Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95324Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037564

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8981IBM BigFix Inventory v9 allows web pages to be stored locall…
• CVE-2016-8982IBM InfoSphere Information Server stores sensitive informati…
• CVE-2016-8986IBM WebSphere MQ 8.0 could allow an authenticated user with …
• CVE-2016-8987IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow an…
• CVE-2016-8998IBM Tivoli Storage Manager Server 7.1 could allow an authent…
• CVE-2016-8999IBM InfoSphere Information Server contains a Path-relative s…
• CVE-2016-9005IBM System Storage TS3100-TS3200 Tape Library could allow an…
• CVE-2016-9006IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site…
• CVE-2016-9008IBM UrbanCode Deploy could allow a malicious user to access …
• CVE-2016-9009IBM WebSphere MQ 8.0 could allow an authenticated user with …
• CVE-2016-9010IBM WebSphere Message Broker 9.0 and 10.0 could allow a remo…
• CVE-2016-9011The wmf_malloc function in api.c in libwmf 0.2.8.4 allows re…