IBM Business Process Manager 8.0.1.1/8.5.7 Web UI cross site scripting

A vulnerability was found in IBM Business Process Manager 8.0.1.1/8.5.7 (Business Process Management Software) and classified as problematic. This issue affects an unknown part of the component Web UI. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10820080	01/14/2021	VulD...	person_name	Nalla Muthu S/Prasath K	securityfocus.com	01/14/2021	accepted	70
10820079	01/14/2021	VulD...	cvss2_nvd_basescore	3.5	nist.gov	01/14/2021	accepted	90
10820078	01/14/2021	VulD...	xforce	127478	cve.mitre.org	01/14/2021	accepted	70
7141218	11/19/2019	VulD...	securityfocus_class	Input Validation Error	securityfocus.com	11/19/2019	accepted	100
7141217	11/19/2019	VulD...	securityfocus_date	1506038400 (09/22/2017)	securityfocus.com	11/19/2019	accepted	100
7141209	11/19/2019	VulD...	confirm_url	http://www.ibm.com/support/docview.wss?uid=swg22006265	ibm.com	11/19/2019	accepted	100
7141170	11/19/2019	VulD...	discoverydate	1506038400		11/19/2019	accepted	100
7141230	09/27/2017	VulD...	cvss3_nvd_basescore	5.4	nist.gov	09/27/2017	accepted	90
7141229	09/27/2017	VulD...	0day_days	4		09/27/2017	accepted	90
7141228	09/27/2017	VulD...	cvss3_vuldb_rc	X		09/27/2017	accepted	90
7141227	09/27/2017	VulD...	cvss3_vuldb_rl	X		09/27/2017	accepted	90
7141226	09/27/2017	VulD...	cvss3_vuldb_e	X		09/27/2017	accepted	90
7141225	09/27/2017	VulD...	cvss2_vuldb_rc	ND		09/27/2017	accepted	90
7141224	09/27/2017	VulD...	cvss2_vuldb_rl	ND		09/27/2017	accepted	90
7141223	09/27/2017	VulD...	cvss2_vuldb_e	ND		09/27/2017	accepted	90
7141222	09/27/2017	VulD...	location	Website		09/27/2017	accepted	90
7141221	09/27/2017	VulD...	qualys_title	IBM Business Process Manager Cross-site Scripting vulnerability (swg22006265)	qualys.com	09/27/2017	accepted	100
7141220	09/27/2017	VulD...	qualys_id	370608	qualys.com	09/27/2017	accepted	100
7141219	09/27/2017	VulD...	securityfocus_title	IBM Business Process Manager CVE-2017-1425 Cross Site Scripting Vulnerability	securityfocus.com	09/27/2017	accepted	100
7141216	09/27/2017	VulD...	securityfocus	100961	securityfocus.com	09/27/2017	accepted	100