CVE-2014-6101: XSS
Cross-site scripting (XSS) vulnerability in the redirect-login feature in IBM Business Process Manager (BPM) Advanced 7.5 through 8.5.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6101?
CVE-2014-6101 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2014-6101?
To fix CVE-2014-6101, update your IBM Business Process Manager to the latest version that has patched this vulnerability.
What types of attacks can exploit CVE-2014-6101?
CVE-2014-6101 can be exploited through cross-site scripting attacks, allowing attackers to inject malicious scripts.
Which versions of IBM Business Process Manager are affected by CVE-2014-6101?
CVE-2014-6101 affects IBM Business Process Manager Advanced versions 7.5 through 8.5.5.
Who is primarily at risk from CVE-2014-6101?
Organizations using the affected versions of IBM Business Process Manager may be at risk from CVE-2014-6101 if they do not implement the necessary updates.