Vulnerability Bulletins |
IBM Security Bulletin: Persistent cross-site scripting vulnerabilities in IBM Business Process Manager (BPM) Process Portal (CVE-2015-0103) |
|
| Affected software | IBM |
|
IBM Business Process Manager is vulnerable to persistent cross-site scripting due to insufficient validation of user input retrieved from the database. An authenticated malicious user can inject script in data fields. This script might be executed by other users when displaying this data. CVE(s): CVE-2015-0103 Affected product(s) and affected version(s): IBM Business Process Manager Standard V8.0.x 8.5.x IBM Business Process Manager Express V8.0.x 8.5.x IBM Business Process Manager More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_persistent_cross_site_scripting_vulnerabilities_in_ibm_business_process_manager_bpm_process_portal_cve_2015_0103?lang=en_us |
|