(RHSA-2016:1969) Moderate: Red Hat JBoss BPM Suite security update

This release of Red Hat JBoss BPM Suite 6.3.3 serves as a replacement for Red Hat JBoss BPM Suite 6.3.2, and includes bug fixes and enhancements, which are documented in the Release Notes of the patch linked to in the References section.

Security Fix(es):

• A security flaw was found in the way Business Process Editor displays the business process details to the user. A remote, authenticated attacker with privilege to create business processes could use this flaw to conduct stored XSS attacks against other users. (CVE-2016-5398)

This issue was discovered by Jeremy Choi (Red Hat Product Security).