2 matches found
CVE-2013-0581: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IBM Business Process Manager BPM 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 ProcessPortal/jsp/socialPortal/dashboard.jsp, 2...
3.5CVSS5.8AI score0.00936EPSS
SaveExploits0References2
PT-2013-2440
Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 7.5.1.x through 8.0.1 before FP1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script ...
3.5CVSS0.00936EPSS
SaveExploits0References4
20