Lucene search

[email protected]CVE-2015-0106

HistoryMar 24, 2015 - 12:59 a.m.

CVE-2015-0106

2015-03-2400:59:02

CWE-79

[email protected]

web.nvd.nist.gov

cve-2015-0106

cross-site scripting

xss

ibm business process manager

bpm

websphere lombardi edition

wle

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.5%

JSON

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected configurations

NVD

Node

ibmwebsphere_application_serverMatch7.1lombardi

ibmwebsphere_application_serverMatch7.2lombardi

ibmwebsphere_application_serverMatch7.2.0.1lombardi

ibmwebsphere_application_serverMatch7.2.0.2lombardi

ibmwebsphere_application_serverMatch7.2.0.3lombardi

ibmwebsphere_application_serverMatch7.2.0.4lombardi

ibmwebsphere_application_serverMatch7.2.0.5lombardi

Node

ibmbusiness_process_managerMatch7.5.0.0advanced

ibmbusiness_process_managerMatch7.5.0.0express

ibmbusiness_process_managerMatch7.5.0.0standard

ibmbusiness_process_managerMatch7.5.0.1advanced

ibmbusiness_process_managerMatch7.5.0.1express

ibmbusiness_process_managerMatch7.5.0.1standard

ibmbusiness_process_managerMatch7.5.1.0advanced

ibmbusiness_process_managerMatch7.5.1.0express

ibmbusiness_process_managerMatch7.5.1.0standard

ibmbusiness_process_managerMatch7.5.1.1advanced

ibmbusiness_process_managerMatch7.5.1.1express

ibmbusiness_process_managerMatch7.5.1.1standard

ibmbusiness_process_managerMatch7.5.1.2advanced

ibmbusiness_process_managerMatch7.5.1.2express

ibmbusiness_process_managerMatch7.5.1.2standard

ibmbusiness_process_managerMatch8.0.0.0advanced

ibmbusiness_process_managerMatch8.0.0.0express

ibmbusiness_process_managerMatch8.0.0.0standard

ibmbusiness_process_managerMatch8.0.1.0advanced

ibmbusiness_process_managerMatch8.0.1.0express

ibmbusiness_process_managerMatch8.0.1.0standard

ibmbusiness_process_managerMatch8.0.1.1advanced

ibmbusiness_process_managerMatch8.0.1.1express

ibmbusiness_process_managerMatch8.0.1.1standard

ibmbusiness_process_managerMatch8.0.1.2advanced

ibmbusiness_process_managerMatch8.0.1.2express

ibmbusiness_process_managerMatch8.0.1.2standard

ibmbusiness_process_managerMatch8.0.1.3advanced

ibmbusiness_process_managerMatch8.0.1.3express

ibmbusiness_process_managerMatch8.0.1.3standard

ibmbusiness_process_managerMatch8.5.0.0advanced

ibmbusiness_process_managerMatch8.5.0.0express

ibmbusiness_process_managerMatch8.5.0.0standard

ibmbusiness_process_managerMatch8.5.0.1advanced

ibmbusiness_process_managerMatch8.5.0.1express

ibmbusiness_process_managerMatch8.5.0.1standard

ibmbusiness_process_managerMatch8.5.5.0advanced

ibmbusiness_process_managerMatch8.5.5.0express

ibmbusiness_process_managerMatch8.5.5.0standard

CPENameOperatorVersion
ibm:websphere_application_serveribm websphere application servereq7.1
ibm:websphere_application_serveribm websphere application servereq7.2
ibm:websphere_application_serveribm websphere application servereq7.2.0.1
ibm:websphere_application_serveribm websphere application servereq7.2.0.2
ibm:websphere_application_serveribm websphere application servereq7.2.0.3
ibm:websphere_application_serveribm websphere application servereq7.2.0.4
ibm:websphere_application_serveribm websphere application servereq7.2.0.5

CPE	Name	Operator	Version
ibm:websphere_application_server	ibm websphere application server	eq	7.1
ibm:websphere_application_server	ibm websphere application server	eq	7.2
ibm:websphere_application_server	ibm websphere application server	eq	7.2.0.1
ibm:websphere_application_server	ibm websphere application server	eq	7.2.0.2
ibm:websphere_application_server	ibm websphere application server	eq	7.2.0.3
ibm:websphere_application_server	ibm websphere application server	eq	7.2.0.4
ibm:websphere_application_server	ibm websphere application server	eq	7.2.0.5