CVE-2015-0101

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; and IBM Business Process Manager Advanced 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5.

Score

CVSS 3.0 6.1 Medium

Status

Modified - psirt@us.ibm.com

Published

2017-08-28

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Business Process Manager (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21693134
• http://www.securityfocus.com/bid/72920