Vulnerability Bulletins |
IBM Security Bulletin: Cross-site scripting vulnerabilities in IBM Business Process Manager (BPM) Process Portal (CVE-2014-8913, CVE-2014-8914) |
|
| Affected software | IBM |
|
Insufficient user input validation in IBM Business Process Managers Process Portal can lead to a cross-site scripting exposure. CVE(s): CVE-2014-8913 and CVE-2014-8914 Affected product(s) and affected version(s): IBM Business Process Manager Standard V8.0.x 8.5.x IBM Business Process Manager Express V8.0.x 8.5.x IBM Business Process Manager Advanced V8.0.x 8.5.x Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_cross_site_scripting_vulnerabilities_in_ibm_business_process_manager_bpm_process_portal_cve_2014_8913_cve_2014_8914?lang=en_us |
|