IBM Security Bulletin: The IBM BigFix Platform has a Cross-Site Scripting vulnerability (CVE-2016-0293 )

A .beswrpt can be injected/modified to contain malicious JavaScript

CVE(s): CVE-2016-0293

Affected product(s) and affected version(s):

9.0, 9.1, 9.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2bCHngR
X-Force Database: http://ift.tt/2bsDSvY

from IBM Product Security Incident Response Team http://ift.tt/2bCIb5E