CVE-2016-8232

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-01 · updated 2026-06-17
Weakness: CWE-79

Description

Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Management Module (AMM) versions earlier than 66Z of Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 allows an unauthenticated attacker with access to the AMM's IP address to send a crafted URL that could inject a malicious script to access a user's AMM data such as cookies or other session information.

Affected products

IBM Advanced Management Module Firmware: all versions

References

http://www.securityfocus.com/bid/95839
https://exchange.xforce.ibmcloud.com/vulnerabilities/121443
https://support.lenovo.com/us/en/product_security/LEN-5700
http://www.securityfocus.com/bid/95839
https://exchange.xforce.ibmcloud.com/vulnerabilities/121443
https://support.lenovo.com/us/en/product_security/LEN-5700

Get alerted when CVE-2016-8232 or the next vulnerability affects your stack