CVE-2016-5901

published 2016-10-05

CVE-2016-5901: Cross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative fix 2016.09 allows…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative fix 2016.09 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—

CWE-79