PT-2016-6723 · Ibm · Ibm Business Process Manager Advanced

Publicado 2016-10-05 · Atualizado 2016-11-28 · CVE-2016-5901

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager Advanced versions 8.5.6.0 through 8.5.7.0

Description A cross-site scripting (XSS) issue exists in a test page, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors.

Recommendations For versions 8.5.6.0 through 8.5.7.0, apply cumulative fix 2016.09 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-5901

Produtos afetados

Ibm Business Process Manager Advanced

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-5901 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-5901 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR56391 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21990852 · Aviso do Fabricante
• http://securityfocus.com/bid/93353 · Nota