CVE-2018-1384 IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...
MediumCVSS 5.4
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm business process manager | = 7.5.0.0 | No fix listed |
| ibm business process manager | = 7.5.0.1 | No fix listed |
| ibm business process manager | = 7.5.1.0 | No fix listed |
| ibm business process manager | = 7.5.1.1 | No fix listed |
| ibm business process manager | = 7.5.1.2 | No fix listed |
| ibm business process manager | = 8.0.0.0 | No fix listed |
| ibm business process manager | = 8.0.1.0 | No fix listed |
| ibm business process manager | = 8.0.1.1 | No fix listed |
| ibm business process manager | = 8.0.1.2 | No fix listed |
| ibm business process manager | = 8.0.1.3 | No fix listed |
| ibm business process manager | = 8.5.0.0 | No fix listed |
| ibm business process manager | = 8.5.0.1 | No fix listed |
| ibm business process manager | = 8.5.0.2 | No fix listed |
| ibm business process manager | = 8.5.5.0 | No fix listed |
| ibm business process manager | = 8.5.6.0 | No fix listed |
| ibm business process manager | = 8.5.6.1 | No fix listed |
| ibm business process manager | = 8.5.6.2 | No fix listed |
| ibm business process manager | = 8.5.7.0 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201606 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201609 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201612 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201703 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201706 | No fix listed |
| ibm business process manager | = 8.6.0.0 | No fix listed |
| ibm business process manager | = 8.6.0.0-cf201712 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere enterprise service bus | = 7.0.0.0 | No fix listed |
| ibm websphere enterprise service bus | = 7.0.0.1 | No fix listed |
| ibm websphere enterprise service bus | = 7.0.0.2 | No fix listed |
| ibm websphere enterprise service bus | = 7.0.0.3 | No fix listed |
| ibm websphere enterprise service bus | = 7.0.0.4 | No fix listed |
| ibm websphere enterprise service bus | = 7.0.0.5 | No fix listed |
| ibm websphere enterprise service bus | = 7.5.0.0 | No fix listed |
| ibm websphere enterprise service bus | = 7.5.0.1 | No fix listed |
| ibm websphere enterprise service bus | = 7.5.1.0 | No fix listed |
| ibm websphere enterprise service bus | = 7.5.1.1 | No fix listed |
| ibm websphere enterprise service bus | = 7.5.1.2 | No fix listed |
| ibm websphere process server | = 7.0 | No fix listed |
| ibm websphere process server | = 7.0.0.1 | No fix listed |
| ibm websphere process server | = 7.0.0.2 | No fix listed |
| ibm websphere process server | = 7.0.0.3 | No fix listed |
| ibm websphere process server | = 7.0.0.4 | No fix listed |
| ibm websphere process server | = 7.0.0.5 | No fix listed |
| ibm business process manager enterprise service bus | = 8.6.0.0 | No fix listed |
| ibm business process manager | = 8.6 | No fix listed |
| ibm business process manager | = 8.6.0.CF201712 | No fix listed |
References
- www.ibm.com vendor-advisory
- 103681 third-party-advisory vdb-entry
- 1040624 third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com vdb-entry vendor-advisory