IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2015-06513)

IBM Business Process Manager is a comprehensive business process management platform. A cross-site scripting vulnerability exists in IBM Business Process Manager that could allow a remote, authenticated user to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-4955

Cross-site scripting XSS vulnerability in IBM Business Process Manager BPM 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 before 8.5.6.0 CF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-4955

Cross-site scripting XSS vulnerability in IBM Business Process Manager BPM 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 before 8.5.6.0 CF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-4955

Cross-site scripting XSS vulnerability in IBM Business Process Manager BPM 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 before 8.5.6.0 CF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the Business Process Manager system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted URL...

The vulnerability of the Business Process Manager system allows a perpetrator to circumvent existing access restrictions and execute arbitrary Java scripts.

The vulnerability of the REST API interface of the Business Process Manager system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and execute arbitrary Java scripts using a specially crafted API request...

The vulnerability of the Business Process Manager system allows a perpetrator to circumvent existing access restrictions.

The vulnerability of the REST API interface of the Business Process Manager system is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions remotely...

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the REST API interface of the Business Process Manager system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted URL...

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the Business Process Manager system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted URL...

The vulnerability of the Business Process Manager system allows a perpetrator to circumvent access restrictions related to document loading/saving.

The vulnerability of the Business Process Manager system’s automation functionality is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent access restrictions associated with document loading/saving when the...

The vulnerability of the Business Process Manager operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Concurrent Data Management Replication process in the Business Process Manager operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially...

The vulnerability of the Business Process Manager operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the LPTS operating system’s Business Process Manager implementation is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by continuously sending specially crafted packets to TCP and UDP ports...

CVE-2015-1904

IBM Business Process Manager BPM 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Content Management ECM integration is enabled with a certain technical system account configuration, allows remote authenticated users to bypas...

IBM Business Process Manager Scheduled Access Restriction Bypass Vulnerability

IBM Business Process Manager is a comprehensive business process management platform. A scheduled access restriction bypass vulnerability exists in IBM Business Process Manager 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0,8.5.6 through 8.5.6.0, which...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2015-04971)

IBM Business Process Manager is a comprehensive business process management platform. A cross-site scripting vulnerability exists in IBM Business Process Manager 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0,8.5.6 through 8.5.6.0, which could allow a...

CVE-2015-1906

Cross-site scripting XSS vulnerability in the REST API in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted U...

Cross site scripting

Cross-site scripting XSS vulnerability in the REST API in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted U...

CVE-2015-1906

Cross-site scripting XSS vulnerability in the REST API in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted U...

Design/Logic Flaw

The REST API in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via a...

CVE-2015-1961

The REST API in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via a...