IBM Security Bulletin: IBM Forms Experience Builder is susceptible to a cross site scripting vulnerability (CVE-2016-0370)

IBM Forms Experience Builder is susceptible to building an application by an administrator that could expose a cross site scripting vulnerability.

CVE(s): CVE-2016-0370

Affected product(s) and affected version(s):

IBM Forms Experience Builder 8.5
IBM Forms Experience Builder 8.5.1
IBM Forms Experience Builder 8.6

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2b6cymL
X-Force Database: http://ift.tt/2aUjDmO

from IBM Product Security Incident Response Team http://ift.tt/2b6dYgO