IBM Security Bulletin: The IBM BigFix Platform has a cross-site scripting vulnerability (CVE-2016-0269)

The BES Gather function for the BigFix platform allows cross-site scripting

CVE(s): CVE-2016-0269

Affected product(s) and affected version(s):

9.0, 9.1, 9.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2a2hkPu
X-Force Database: http://ift.tt/29yS3xI

from IBM Product Security Incident Response Team http://ift.tt/2a2hvuc