CVE-2016-5901

CVE-2016-5901 is an XSS vulnerability in IBM Business Process Manager Advanced 8.5.6.0–8.5.7.0 prior to cumulative fix 2016.09. The issue allows remote authenticated users to inject arbitrary web script/HTML via unspecified vectors in a test page. IBM’s bulletin identifies the affected product/ve...