3 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Coach NG framework in IBM Business Process Manager BPM 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
PT-2015-4506
Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 8.0 through 8.0.1.3 IBM Business Process Manager BPM versions 8.5.0 through 8.5.0.1 IBM Business Process Manager BPM versions 8.5.5 through 8.5.5.0 Description A cross-site scripting XSS issue exists i...
CVE-2015-0158: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Coach NG framework in IBM Business Process Manager BPM 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...