Lucene search

[email protected]NVD:CVE-2015-0158

HistoryMar 24, 2015 - 2:01 a.m.

CVE-2015-0158

2015-03-2402:01:38

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.005

Percentile

76.5%

JSON

Cross-site scripting (XSS) vulnerability in the Coach NG framework in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected configurations

Nvd

Node

ibmbusiness_process_managerMatch8.0.0.0advanced

ibmbusiness_process_managerMatch8.0.0.0express

ibmbusiness_process_managerMatch8.0.0.0standard

ibmbusiness_process_managerMatch8.0.1.0advanced

ibmbusiness_process_managerMatch8.0.1.0express

ibmbusiness_process_managerMatch8.0.1.0standard

ibmbusiness_process_managerMatch8.0.1.1advanced

ibmbusiness_process_managerMatch8.0.1.1express

ibmbusiness_process_managerMatch8.0.1.1standard

ibmbusiness_process_managerMatch8.0.1.2advanced

ibmbusiness_process_managerMatch8.0.1.2express

ibmbusiness_process_managerMatch8.0.1.2standard

ibmbusiness_process_managerMatch8.0.1.3advanced

ibmbusiness_process_managerMatch8.0.1.3express

ibmbusiness_process_managerMatch8.0.1.3standard

ibmbusiness_process_managerMatch8.5.0.0advanced

ibmbusiness_process_managerMatch8.5.0.0express

ibmbusiness_process_managerMatch8.5.0.0standard

ibmbusiness_process_managerMatch8.5.0.1advanced

ibmbusiness_process_managerMatch8.5.0.1express

ibmbusiness_process_managerMatch8.5.0.1standard

ibmbusiness_process_managerMatch8.5.5.0advanced

ibmbusiness_process_managerMatch8.5.5.0express

ibmbusiness_process_managerMatch8.5.5.0standard

VendorProductVersionCPE
ibmbusiness_process_manager8.0.0.0cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*
ibmbusiness_process_manager8.0.0.0cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*
ibmbusiness_process_manager8.0.0.0cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*
ibmbusiness_process_manager8.0.1.0cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*
ibmbusiness_process_manager8.0.1.0cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*
ibmbusiness_process_manager8.0.1.0cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*
ibmbusiness_process_manager8.0.1.1cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*
ibmbusiness_process_manager8.0.1.1cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*
ibmbusiness_process_manager8.0.1.1cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*
ibmbusiness_process_manager8.0.1.2cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*

Vendor	Product	Version	CPE
ibm	business_process_manager	8.0.0.0	cpe:2.3:a:ibm:business_process_manager:8.0.0.0::::advanced:::
ibm	business_process_manager	8.0.0.0	cpe:2.3:a:ibm:business_process_manager:8.0.0.0::::express:::
ibm	business_process_manager	8.0.0.0	cpe:2.3:a:ibm:business_process_manager:8.0.0.0::::standard:::
ibm	business_process_manager	8.0.1.0	cpe:2.3:a:ibm:business_process_manager:8.0.1.0::::advanced:::
ibm	business_process_manager	8.0.1.0	cpe:2.3:a:ibm:business_process_manager:8.0.1.0::::express:::
ibm	business_process_manager	8.0.1.0	cpe:2.3:a:ibm:business_process_manager:8.0.1.0::::standard:::
ibm	business_process_manager	8.0.1.1	cpe:2.3:a:ibm:business_process_manager:8.0.1.1::::advanced:::
ibm	business_process_manager	8.0.1.1	cpe:2.3:a:ibm:business_process_manager:8.0.1.1::::express:::
ibm	business_process_manager	8.0.1.1	cpe:2.3:a:ibm:business_process_manager:8.0.1.1::::standard:::
ibm	business_process_manager	8.0.1.2	cpe:2.3:a:ibm:business_process_manager:8.0.1.2::::advanced:::