Description
Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21694937
- JR50607 vendor-advisory
- JR50162 vendor-advisory