PT-2016-6723 · Ibm · Ibm Business Process Manager Advanced

Published 2016-10-05 · Updated 2016-11-28 · CVE-2016-5901

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager Advanced versions 8.5.6.0 through 8.5.7.0

Description A cross-site scripting (XSS) issue exists in a test page, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors.

Recommendations For versions 8.5.6.0 through 8.5.7.0, apply cumulative fix 2016.09 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-5901

Affected Products

Ibm Business Process Manager Advanced

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-5901 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5901 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR56391 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21990852 · Vendor Advisory
• http://securityfocus.com/bid/93353 · Note