IBM Security Bulletin: IBM Connections Security Update (CVE-2016-2955)

IBM Connections Security Update for CVE-2016-2955. IBM Connections is vulnerable to cross-site scripting in IBM Connections 5.0 and later, see details below for remediation information.

CVE(s): CVE-2016-2955

Affected product(s) and affected version(s):

The following versions of IBM Connections are impacted:
IBM Connections 5.5
IBM Connections 5.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2b1F23e
X-Force Database: http://ift.tt/2bl3s2x

from IBM Product Security Incident Response Team http://ift.tt/2b1EEC6