CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-8914

Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8913.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.016

EPSS Ranking 73.2%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2014-8914

Ibm » Business Process Manager » Version: 8.0.0.0

cpe:2.3:a:ibm:business_process_manager:8.0.0.0
Ibm » Business Process Manager » Version: 8.0.1.0

cpe:2.3:a:ibm:business_process_manager:8.0.1.0
Ibm » Business Process Manager » Version: 8.0.1.1

cpe:2.3:a:ibm:business_process_manager:8.0.1.1
Ibm » Business Process Manager » Version: 8.0.1.2

cpe:2.3:a:ibm:business_process_manager:8.0.1.2
Ibm » Business Process Manager » Version: 8.0.1.3

cpe:2.3:a:ibm:business_process_manager:8.0.1.3
Ibm » Business Process Manager » Version: 8.5.0.0

cpe:2.3:a:ibm:business_process_manager:8.5.0.0
Ibm » Business Process Manager » Version: 8.5.0.1

cpe:2.3:a:ibm:business_process_manager:8.5.0.1
Ibm » Business Process Manager » Version: 8.5.5.0

cpe:2.3:a:ibm:business_process_manager:8.5.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-8914

Products

Pricing

Contact Us