CVE-2016-0227

2016-03-0322:00:00

ibm

www.cve.org

0.001 Low

EPSS

Percentile

35.0%

JSON

Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, and 8.5.5 and 8.5.6 through 8.5.6.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.