CVE-2015-1906

published 2015-07-21

CVE-2015-1906: Cross-site scripting (XSS) vulnerability in the REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through…

low 3.5 CVSS 3.1

AV N AC M Au S C N I P A N

Cross-site scripting (XSS) vulnerability in the REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—

CWE-79