{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-21T12:11:49.974","vulnerabilities":[{"cve":{"id":"CVE-2016-0255","sourceIdentifier":"psirt@us.ibm.com","published":"2017-05-05T19:29:00.170","lastModified":"2025-04-20T01:37:25.860","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 110564."},{"lang":"es","value":"IBM Marketing Platform 9.1 y 10.0 es vulnerable a secuencias de comandos en sitios cruzados almacenados, provocado por la validación incorrecta de la entrada suministrada por el usuario. Un atacante remoto podría explotar la vulnerabilidad para inyectar código malicioso en la página web, el cual se podría ejecutar en el navegador de la víctima en el contexto del hosting, una vez que dicha página sea visualizada. Un atacante podría utilizar esta vulnerabilidad para robar credenciales de autenticación basados en cookies. IBM X-Force ID: 110564."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1:*:*:*:*:*:*:*","matchCriteriaId":"05558B4D-FAEB-4D25-A7BE-9946FE643200"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FA58BAA3-7811-4F95-9CEF-685C9D412B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1D695B1C-958A-49A9-87DE-D8A53D5B6C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:marketing_platform:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A394A760-E812-4D3C-9B00-F55EEA03CFB5"}]}]}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=swg22001950","source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98336","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22001950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}}]}