Security Bulletin: Cross-Site scripting vulnerability in IBM Business Process Manager document list control (CVE-2016-0227)

Summary Due to insufficient user input escaping IBM Business Process Manager document list control is vulnerable to Cross-Site scripting. Vulnerability Details CVEID: CVE-2016-0227 DESCRIPTION: IBM Business Process Manager is vulnerable to cross-site scripting, caused by improper validation of...

CVE-2016-0227

CVE-2016-0227 affects IBM Business Process Manager (BPM) document-list control. The vulnerability arises from insufficient input escaping, enabling cross-site scripting via a specially crafted URL. Affected BPM versions include 8.0 (to 8.0.1.3), 8.5.0 (to 8.5.0.2), 8.5.5, and 8.5.6 (to 8.5.6.2). ...