Skip to content
OpenAdvisories
Unscored CVE-2017-1530 EUVD-2017-10546GHSA-q5xw-2jc4-3whw

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

Published Sep 26, 2017 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Business Process Manager Advanced

Description

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130409.

Affected products

VendorProductAffectedFixed
IBM Business Process Manager Advanced 7.5, 7.5.0.1, 7.5.1, 7.5.1.1, 7.5.1.2, 8.0, 8.0.1, 8.0.1.1, 8.0.1.2, 8.5, 8.5.0.1, 8.5.5, 8.0.1.3, 8.5.6, 8.5.0.2, 8.5.7, 8.5.7.CF201609, 8.5.6.1, 8.5.6.2, 8.5.7.CF201606, 8.5.7.CF201612, 8.5.7.CF201703, 8.5.7.CF201706 —

References