Vulnerability Bulletins |
IBM Security Bulletin: Cross-Site scripting vulnerability in IBM Business Process Manager document list control (CVE-2016-0227) |
|
| Affected software | IBM |
|
Due to insufficient user input escaping IBM Business Process Manager document list control is vulnerable to Cross-Site scripting. CVE(s): CVE-2016-0227Affected product(s) and affected version(s): IBM Business Process Manager V8.0 through V8.0.1.3 IBM Business Process Manager V8.5.0 through V8.5.0.2 IBM Business Process Manager V8.5.5 IBM Business Process Manager V8.5.6 through V8.5.6.0 cumulative fix 2 Refer to the following reference URLs for remediation and additional vulnerability More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_cross_site_scripting_vulnerability_in_ibm_business_process_manager_document_list_control_cve_2016_0227?lang=en_us |
|