CVE-2016-8232

Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Management Module (AMM) versions earlier than 66Z of Lenovo IBM…

published March 1, 2017

CVSS
—
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Management Module (AMM) versions earlier than 66Z of Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 allows an unauthenticated attacker with access to the AMM's IP address to send a crafted URL that could inject a malicious script to access a user's AMM data such as cookies or other session information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01433 · 72.7th percentile
Published
2017-03-01T21:00Z
EPSS history
Timeline
  • 01 MAR 21:00Z
    Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Management Module (AMM) versions earlier than 66Z of Lenovo IBM…
    cvelistv5