# CVEs published 2016-11-24

11 CVEs were published on November 24, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4961](https://cve.now/CVE-2015-4961.md): IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A befor (no CVSS)
- [CVE-2016-0273](https://cve.now/CVE-2016-0273.md): Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5 (no CVSS)
- [CVE-2016-0282](https://cve.now/CVE-2016-0282.md): Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script (no CVSS)
- [CVE-2016-0284](https://cve.now/CVE-2016-0284.md): The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, an (no CVSS)
- [CVE-2016-0285](https://cve.now/CVE-2016-0285.md): Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5 (no CVSS)
- [CVE-2016-0325](https://cve.now/CVE-2016-0325.md): IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 (no CVSS)
- [CVE-2016-0353](https://cve.now/CVE-2016-0353.md): IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session (no CVSS)
- [CVE-2016-0372](https://cve.now/CVE-2016-0372.md): IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 (no CVSS)
- [CVE-2016-0378](https://cve.now/CVE-2016-0378.md): IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a default error page, allows remote attackers to (no CVSS)
- [CVE-2016-2864](https://cve.now/CVE-2016-2864.md): Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5 (no CVSS)
- [CVE-2016-2996](https://cve.now/CVE-2016-2996.md): IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-11-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.