Vulnerability Database

309,130

Total vulnerabilities in the database

CVE-2016-2956

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-3008.

  • Published: Sep 1, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-2956
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ibm / connections 5.5.0.0 5.5.0.0.x
ibm / connections 5.0.0.0 5.0.0.0.x