CVE-2016-3020

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web versions 7.0.0 through 9.0.0

Description The issue is caused by improper content validation, allowing a remote attacker to bypass security restrictions. An attacker could exploit this by persuading a victim to open specially-crafted content, which could then load a page with malicious content.

Recommendations For versions 7.0.0 through 9.0.0, update the content validation mechanism to properly check and restrict malicious content.