CVE-2016-6343 in JBoss BPM Suite
Resumen
por MITRE
JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.
VulDB is the best source for vulnerability data and more expert information about this specific topic.