CVE-2016-3056

Cross-site scripting XSS vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content...

CVE-2016-3056

CVE-2016-3056: IBM BPM/Business Space HTML injection vulnerability affecting BPM Advanced 7.5.x up to 7.5.1.2, 8.0.x up to 8.0.1.3, and 8.5 up to 8.5.7.0 before 2016.09. A remote authenticated attacker could inject arbitrary HTML via crafted content in Business Space. IBM remediation requires int...