Medium WID-SEC-2026-3720 4 CVEs

IBM Business Process Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Apr 6, 2020 · Updated Oct 4, 2026 · Revision 2 · de-DE

Vendor: IBM Product: Business Process Manager Product: QRadar SIEM Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Business Process Manager ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

IBM Business Process Manager ermöglicht Transparenz und Einblicke in die Verwaltung von Geschäftsprozessen.

Vulnerabilities 4

Critical 9.8

CVE-2018-15494

dojox vulnerable to unescaped string injection

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

dojo dojo dojox Debian Ubuntu npm

Aug 18, 2018
Medium 6.1

CVE-2012-6708 Public exploit

Cross-Site Scripting in jquery

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<…

ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Medium 6.1

CVE-2019-11358 Public exploit EPSS 87%

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

mediawiki mediawiki django drupal/core Debian Ubuntu Azure Linux Alpine npm Packagist Maven PyPI NuGet RubyGems

Apr 19, 2019
Medium —

CVE-2011-4969 EPSS 19%

jQuery vulnerable to Cross-Site Scripting (XSS)

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.

jquery-rails jquery org.webjars.npm:jquery jQuery Azure Linux npm Maven NuGet RubyGems

Mar 8, 2013

Revision history

2026-10-04 #2
Neue Updates von IBM aufgenommen
2020-04-06 #1
Initiale Fassung

References

IBM Security Bulletin vom 2020-04-06
https://www.ibm.com/support/pages/node/6155493
IBM Security Bulletin 7290733 vom 2026-10-02
https://www.ibm.com/support/pages/node/7290733