Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM SmartCloud Orchestrator

Summary IBM Business Process Manager is shipped as a component of IBM Cloud Orchestrator, IBM Cloud Orchestrator Enterprise, IBM SmartCloud Orchestrator, and IBM SmartCloud Orchestrator Enterprise. Vulnerability Details Review the following security bulletins for IBM Business Process Manager for...

Security Bulletin: Multiple Cross-Site scripting vulnerabilities in IBM Business Process Manager Process Portal (CVE-2015-8524)

Summary Due to insufficient user input escaping IBM Business Process Manager Process Portal is vulnerable to Cross-Site scripting. Vulnerability Details CVEID: CVE-2015-8524 DESCRIPTION: IBM Business Process Manager is vulnerable to reflected cross-site scripting, which is caused by the improper...

Business Process Manager XSS

The vulnerability of the Process Portal component of the Business Process Manager system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

CVE-2015-8524

Cross-site scripting XSS vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-8524

Cross-site scripting XSS vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2016-1324

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 8.5.0.x through 8.5.0.2 IBM Business Process Manager versions 8.5.5.x through 8.5.5.0 IBM Business Process Manager versions 8.5.6.x through 8.5.6.2 Description The issue exists due to insufficient protecti...

CVE-2015-8524: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-0103

Multiple cross-site scripting XSS vulnerabilities in the Process Portal in IBM Business Process Manager BPM 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified data fields...

Cross site scripting

Cross-site scripting XSS vulnerability in the Process Portal in IBM Business Process Manager BPM 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-0105: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Process Portal in IBM Business Process Manager BPM 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2015-4472

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 8.0 through 8.0.1.3 IBM Business Process Manager BPM versions 8.5.0 through 8.5.0.1 IBM Business Process Manager BPM versions 8.5.5 through 8.5.5.0 Description A cross-site scripting XSS issue exists i...

Multiple Cross-Site Scripting Vulnerabilities in IBM Business Process Manager

IBM Business Process Manager BPM is a comprehensive set of business process management platform from IBM in the United States. The platform provides a range of tools related to process modeling, assembly, monitoring and deployment for business. A cross-site scripting vulnerability exists in Proce...

CVE-2015-0103: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Process Portal in IBM Business Process Manager BPM 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified data fields...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2015-01945)

IBM Business Process Manager BPM is a comprehensive set of business process management platform from IBM in the United States. The platform provides a range of tools related to process modeling, assembly, monitoring and deployment for business. A cross-site scripting vulnerability exists in Proce...

PT-2015-4471

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 8.0 through 8.0.1.3 IBM Business Process Manager BPM versions 8.5.0 through 8.5.0.1 IBM Business Process Manager BPM versions 8.5.5 through 8.5.5.0 Description The issue concerns multiple cross-site...

Cross site scripting

Cross-site scripting XSS vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8914...

Cross site scripting

Cross-site scripting XSS vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8913...

CVE-2014-8913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8914...

CVE-2014-8914: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8913...