Aller au contenu
Se connecter
Non notée

CVE-2016-9731 IBM Business Process Manager is vulnerable to cross-site scripting

Description

IBM Business Process Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Produits et versions touchés

Produit Versions touchées Corrigé en
Business Process Manager Advanced 8.5 8.5 → 8.5.7 Pas de correctif indiqué
Business Process Manager Advanced 8.0 8.0 → 8.0.1.3 Pas de correctif indiqué
Business Process Manager Advanced 7.5 7.5 → 7.5.1.2 Pas de correctif indiqué

Autres CVE de Business Process Manager Advanced

Les 3 CVE de Business Process Manager Advanced →
CVE-2017-1159 IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open… Non notée CVE-2016-9693 IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks Non notée
Suivre cette CVE