IBM Security Bulletin: Multiple Cross-Site scripting vulnerabilities in IBM Business Process Manager dashboards (CVE-2015-4955)

Due to insufficient user input escaping IBM Business Process Manager dashboards are vulnerable to Cross-Site scripting. CVE(s):   CVE-2015-4955 Affected product(s) and affected version(s): IBM...

from IBM Product Security Incident Response Team http://ift.tt/1VuVy6l