Cross site scripting

2016-03-0322:59:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

JSON

Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, and 8.5.5 and 8.5.6 through 8.5.6.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CPENameOperatorVersion
business_process_managereq8.5.5.0
business_process_managereq8.5.6.2
business_process_managereq8.5.0.1
business_process_managereq8.0.1.2
business_process_managereq8.0.1.3
business_process_managereq8.5.0.2
business_process_managereq8.5.5.0
business_process_managereq8.0.0.0
business_process_managereq8.0.1.3
business_process_managereq8.5.6.2

Name	Operator	Version
business_process_manager	eq	8.5.5.0
business_process_manager	eq	8.5.6.2
business_process_manager	eq	8.5.0.1
business_process_manager	eq	8.0.1.2
business_process_manager	eq	8.0.1.3
business_process_manager	eq	8.5.0.2
business_process_manager	eq	8.5.5.0
business_process_manager	eq	8.0.0.0
business_process_manager	eq	8.0.1.3
business_process_manager	eq	8.5.6.2