CVE-2016-5398 — Cross-site Scripting in Redhat Jboss BPM Suite

CWE-79 — Cross-site Scripting7 documents5 sources
Severity
5.4MEDIUMNVD
EPSS
0.2%
top 58.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat Jboss BPM SuiteRED HAT Brms
Timeline
PublishedOct 3
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6.3.3 allows remote authenticated users to inject arbitrary web script or HTML by levering permission to create business processes.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5red_hat/brms6

🔴Vulnerability Details

2
GHSA
GHSA-c556-333h-3frm: Cross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6↗2022-05-17
▶
CVEList
CVE-2016-5398: Cross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6↗2016-10-03
▶

📋Vendor Advisories

2
Red Hat
Stored XSS in business process editor↗2016-11-28
▶
Red Hat
stored XSS in JBoss BPM suite business process editor↗2016-09-28
▶

💬Community

2
Bugzilla
CVE-2016-8608 Stored XSS in business process editor↗2016-10-19
▶
Bugzilla
CVE-2016-5398 stored XSS in JBoss BPM suite business process editor↗2016-07-20
▶
CVE-2016-5398 — Cross-site Scripting in Redhat | cvebase