CVE-2016-3056

published 2016-10-14

CVE-2016-3056: Cross-site scripting (XSS) vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content.

Affected

17 ranges

Vendor	Product	Version range	Fixed in
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—

CWE-79