CVE-2016-9704

IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg21996761Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95323Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037765
• http://www.ibm.com/support/docview.wss?uid=swg21996761Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95323Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037765

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9696IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML inje…
• CVE-2016-9697An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, an…
• CVE-2016-9698IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial …
• CVE-2016-9700IBM Jazz Foundation could allow an authenticated attacker to…
• CVE-2016-9701IBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-sit…
• CVE-2016-9703IBM Security Identity Manager Virtual Appliance does not inv…
• CVE-2016-9706IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broke…
• CVE-2016-9707IBM Jazz Foundation is vulnerable to a denial of service, ca…
• CVE-2016-9710IBM Predictive Solutions Foundation (formerly PMQ) could all…
• CVE-2016-9711IBM Predictive Solutions Foundation (IBM Cognos Analytics 11…5.3
• CVE-2016-9714IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.…
• CVE-2016-9715IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.…