Cross site scripting

2018-03-3016:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

35.1%

JSON

IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135.

CPENameOperatorVersion
business_process_managereq8.5.5.0
business_process_managereq8.5.6.2
business_process_managereq8.5.0.1
business_process_managereq8.0.1.3
business_process_managereq7.5.0.0
business_process_managereq7.5.1.2
business_process_managereq8.5.0.2
business_process_managereq7.5.1.0
business_process_managereq7.5.0.1
business_process_managereq7.5.1.1

Name	Operator	Version
business_process_manager	eq	8.5.5.0
business_process_manager	eq	8.5.6.2
business_process_manager	eq	8.5.0.1
business_process_manager	eq	8.0.1.3
business_process_manager	eq	7.5.0.0
business_process_manager	eq	7.5.1.2
business_process_manager	eq	8.5.0.2
business_process_manager	eq	7.5.1.0
business_process_manager	eq	7.5.0.1
business_process_manager	eq	7.5.1.1