CVE-2014-3075: XSS
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web script or HTML via an uploaded file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3075?
CVE-2014-3075 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2014-3075?
To fix CVE-2014-3075, apply the necessary security patches provided by IBM for affected versions of Business Process Manager and WebSphere Lombardi Edition.
Who is affected by CVE-2014-3075?
CVE-2014-3075 affects IBM Business Process Manager versions 7.5.x to 8.5.5 and IBM WebSphere Lombardi Edition version 7.2.0.x.
What types of attacks can exploit CVE-2014-3075?
CVE-2014-3075 can be exploited by remote authenticated users to inject and execute arbitrary web scripts or HTML.
When was CVE-2014-3075 reported?
CVE-2014-3075 was reported on June 5, 2014.