CVE-2016-9731

IBM Business Process Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM Business Process Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-9731

IBM Business Process Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-9731

Summary: IBM Business Process Manager (BPM) is vulnerable to cross-site scripting via the responsive coach view. The CVE-2016-9731 issue allows embedding arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. Affected versions: BPM v8.5.7.0 p...

PT-2017-10297

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2016-9731: Improper Neutralization of Input During Web Page Generation

IBM Business Process Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2016-13273)

IBM Business Process Manager BPM is a comprehensive set of business process management platform from IBM in the United States. The platform provides a range of tools related to process modeling, assembly, monitoring and deployment for business. A cross-site scripting vulnerability exists in IBM...

php: out-of-bounds write in fpm_log.c

An out-of-bounds write flaw was found in the fpmlogwrite logging function of PHP's FastCGI Process Manager service. A remote attacker could repeatedly send maliciously crafted requests to force FPM to exhaust file system space, creating a denial of service and preventing further logging...

Symantec IT Management Suite Multiple Issues

SUMMARY Symantec has released updates to address two security issues: a cross-site scripting XSS issue and a denial of service DoS issue reported in the Symantec IT Management Suite ITMS workflow process manager console. AFFECTED PRODUCTS Symantec IT Manage Suite Workflow Process Manager Console...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2016-10042)

IBM Business Process Manager BPM is a comprehensive business process management platform from IBM in the United States. A cross-site scripting vulnerability in Business Space in IBM Business Process Manager can be exploited by remote authenticated users to inject arbitrary web script or HTML...

CVE-2016-3056

Cross-site scripting XSS vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content...

Cross site scripting

Cross-site scripting XSS vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content...

CVE-2016-3056

Cross-site scripting XSS vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content...

PT-2016-5345

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5 through 7.5.1.2 IBM Business Process Manager versions 8.0 through 8.0.1.3 IBM Business Process Manager versions prior to 8.5.7.0 CF2016.09 Description A cross-site scripting XSS issue exists, allowing...

CVE-2016-3056: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content...

IBM Business Process Manager Advanced Cross-Site Scripting Vulnerability

IBM Business Process Manager Advanced is a unified platform for analyzing and improving business operations. A cross-site scripting vulnerability exists in IBM BPM Advanced versions 8.5.6.0 through 8.5.7.0. A remote attacker can exploit this vulnerability to inject arbitrary JavaScript code into...

CVE-2016-5901

Cross-site scripting XSS vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative fix 2016.09 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5901

Cross-site scripting XSS vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative fix 2016.09 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5901

CVE-2016-5901 is an XSS vulnerability in IBM Business Process Manager Advanced 8.5.6.0–8.5.7.0 prior to cumulative fix 2016.09. The issue allows remote authenticated users to inject arbitrary web script/HTML via unspecified vectors in a test page. IBM’s bulletin identifies the affected product/ve...

PT-2016-6723

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager Advanced versions 8.5.6.0 through 8.5.7.0 Description A cross-site scripting XSS issue exists in a test page, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved via...