Lucene search

[email protected]CVE-2015-0101

HistoryAug 28, 2017 - 3:29 p.m.

CVE-2015-0101

2017-08-2815:29:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2015-0101

cross-site scripting

xss

ibm business process manager standard

ibm business process manager express

ibm business process manager advanced

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

30.7%

JSON

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; and IBM Business Process Manager Advanced 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5.

Affected configurations

NVD

Node

ibmbusiness_process_managerMatch7.5standard

ibmbusiness_process_managerMatch7.5.0.1standard

ibmbusiness_process_managerMatch7.5.1standard

ibmbusiness_process_managerMatch7.5.1.1standard

ibmbusiness_process_managerMatch7.5.1.2standard

ibmbusiness_process_managerMatch8.0standard

ibmbusiness_process_managerMatch8.0.1standard

ibmbusiness_process_managerMatch8.0.1.1standard

ibmbusiness_process_managerMatch8.0.1.2standard

ibmbusiness_process_managerMatch8.0.1.3standard

ibmbusiness_process_managerMatch8.5standard

ibmbusiness_process_managerMatch8.5.0.1standard

ibmbusiness_process_managerMatch8.5.5standard

Node

ibmbusiness_process_managerMatch7.5express

ibmbusiness_process_managerMatch7.5.0.1express

ibmbusiness_process_managerMatch7.5.1express

ibmbusiness_process_managerMatch7.5.1.1express

ibmbusiness_process_managerMatch7.5.1.2express

ibmbusiness_process_managerMatch8.0express

ibmbusiness_process_managerMatch8.0.1express

ibmbusiness_process_managerMatch8.0.1.1express

ibmbusiness_process_managerMatch8.0.1.2express

ibmbusiness_process_managerMatch8.0.1.3express

ibmbusiness_process_managerMatch8.5express

ibmbusiness_process_managerMatch8.5.0.1express

ibmbusiness_process_managerMatch8.5.5express

Node

ibmbusiness_process_managerMatch7.5advanced

ibmbusiness_process_managerMatch7.5.0.1advanced

ibmbusiness_process_managerMatch7.5.1advanced

ibmbusiness_process_managerMatch7.5.1.1advanced

ibmbusiness_process_managerMatch7.5.1.2advanced

ibmbusiness_process_managerMatch8.0advanced

ibmbusiness_process_managerMatch8.0.1advanced

ibmbusiness_process_managerMatch8.0.1.1advanced

ibmbusiness_process_managerMatch8.0.1.2advanced

ibmbusiness_process_managerMatch8.0.1.3advanced

ibmbusiness_process_managerMatch8.5advanced

ibmbusiness_process_managerMatch8.5.0.1advanced

ibmbusiness_process_managerMatch8.5.5advanced

CPENameOperatorVersion
ibm:business_process_manageribm business process managereq7.5
ibm:business_process_manageribm business process managereq7.5.0.1
ibm:business_process_manageribm business process managereq7.5.1
ibm:business_process_manageribm business process managereq7.5.1.1
ibm:business_process_manageribm business process managereq7.5.1.2
ibm:business_process_manageribm business process managereq8.0
ibm:business_process_manageribm business process managereq8.0.1
ibm:business_process_manageribm business process managereq8.0.1.1
ibm:business_process_manageribm business process managereq8.0.1.2
ibm:business_process_manageribm business process managereq8.0.1.3

CPE	Name	Operator	Version
ibm:business_process_manager	ibm business process manager	eq	7.5
ibm:business_process_manager	ibm business process manager	eq	7.5.0.1
ibm:business_process_manager	ibm business process manager	eq	7.5.1
ibm:business_process_manager	ibm business process manager	eq	7.5.1.1
ibm:business_process_manager	ibm business process manager	eq	7.5.1.2
ibm:business_process_manager	ibm business process manager	eq	8.0
ibm:business_process_manager	ibm business process manager	eq	8.0.1
ibm:business_process_manager	ibm business process manager	eq	8.0.1.1
ibm:business_process_manager	ibm business process manager	eq	8.0.1.2
ibm:business_process_manager	ibm business process manager	eq	8.0.1.3

Rows per page:

1-10 of 131

References

www-01.ibm.com/support/docview.wss?uid=swg21693134

www.securityfocus.com/bid/72920

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

30.7%

JSON

Related for CVE-2015-0101

prion1 ibm1 cvelist1 nvd1