PT-2016-7187 · Red Hat · Red Hat Jboss Bpm Suite

Jeremy Choi · Published 2016-09-07 · Updated 2018-01-05 · CVE-2016-7033

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Red Hat JBoss BPM Suite version 6.3.2

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the admin pages of dashbuilder. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For Red Hat JBoss BPM Suite version 6.3.2, update to a version that includes the fix for the XSS vulnerabilities in the admin pages of dashbuilder.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-7033

Affected Products

Red Hat Jboss Bpm Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-7033 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7033 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0249.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1373344 · Note
• http://securityfocus.com/bid/92762 · Note