Beveiligingsadvies

CVE-2013-0581

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-07-06 10:00:00

Laatst bijgewerkt 2024-08-06 14:33:05

Toegewezen door ibm

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) ProcessPortal/jsp/socialPortal/dashboard.jsp, (2) teamworks/executeServiceByName, (3) portal/jsp/viewAdHocReportWizard.do, or (4) rest/bpm/wle/v1/process.

← Alle CVE's bekijken Bekijk op cve.org ↗