IBM Security Bulletin: Cross Site Scripting vulnerability in IBM Business Process Manager (CVE-2016-5901)
A test page that is vulnerabile to cross site scripting has been packaged with IBM Business Process Manager.
CVE(s): CVE-2016-5901
Affected product(s) and affected version(s):
- IBM Business Process Manager Advanced V8.5.6.0 – V8.5.7.0 prior to cumulative fix 2016.09
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2d0fQbQ
X-Force Database: http://ift.tt/2dFDWG9
from IBM Product Security Incident Response Team http://ift.tt/2d0eH44