Vulnerability Details CVE-2015-8524
Cross-site scripting (XSS) vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 69.3%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR54981
- http://www-01.ibm.com/support/docview.wss?uid=swg21974472
- http://www.securitytracker.com/id/1035126
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR54981
- http://www-01.ibm.com/support/docview.wss?uid=swg21974472
- http://www.securitytracker.com/id/1035126
Products affected by CVE-2015-8524
-
cpe:2.3:a:ibm:business_process_manager:8.5.0.0
-
cpe:2.3:a:ibm:business_process_manager:8.5.0.1
-
cpe:2.3:a:ibm:business_process_manager:8.5.0.2
-
cpe:2.3:a:ibm:business_process_manager:8.5.5.0
-
cpe:2.3:a:ibm:business_process_manager:8.5.6.0
-
cpe:2.3:a:ibm:business_process_manager:8.5.6.2