CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-6101

Cross-site scripting (XSS) vulnerability in the redirect-login feature in IBM Business Process Manager (BPM) Advanced 7.5 through 8.5.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2014-6101

Ibm » Business Process Manager » Version: 7.5.0.0

cpe:2.3:a:ibm:business_process_manager:7.5.0.0
Ibm » Business Process Manager » Version: 7.5.0.1

cpe:2.3:a:ibm:business_process_manager:7.5.0.1
Ibm » Business Process Manager » Version: 7.5.1.0

cpe:2.3:a:ibm:business_process_manager:7.5.1.0
Ibm » Business Process Manager » Version: 7.5.1.1

cpe:2.3:a:ibm:business_process_manager:7.5.1.1
Ibm » Business Process Manager » Version: 7.5.1.2

cpe:2.3:a:ibm:business_process_manager:7.5.1.2
Ibm » Business Process Manager » Version: 8.0.0.0

cpe:2.3:a:ibm:business_process_manager:8.0.0.0
Ibm » Business Process Manager » Version: 8.0.1.0

cpe:2.3:a:ibm:business_process_manager:8.0.1.0
Ibm » Business Process Manager » Version: 8.0.1.1

cpe:2.3:a:ibm:business_process_manager:8.0.1.1
Ibm » Business Process Manager » Version: 8.0.1.2

cpe:2.3:a:ibm:business_process_manager:8.0.1.2
Ibm » Business Process Manager » Version: 8.5.0.0

cpe:2.3:a:ibm:business_process_manager:8.5.0.0
Ibm » Business Process Manager » Version: 8.5.0.1

cpe:2.3:a:ibm:business_process_manager:8.5.0.1
Ibm » Business Process Manager » Version: 8.5.5.0

cpe:2.3:a:ibm:business_process_manager:8.5.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-6101

Products

Pricing

Contact Us