CVE-2014-6173

Publication date

2014-12-19 02:00:00

Family

ibm

State

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the Process Inspector in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3 and 8.5.x through 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.