CVE-2016-9731

Summary: IBM Business Process Manager (BPM) is vulnerable to cross-site scripting via the responsive coach view. The CVE-2016-9731 issue allows embedding arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. Affected versions: BPM v8.5.7.0 p...