CVE-2015-0156: XSS
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0156?
CVE-2015-0156 is classified as a moderate severity vulnerability due to its potential for Cross-site Scripting (XSS) attacks.
How do I fix CVE-2015-0156?
To mitigate CVE-2015-0156, users should apply the latest patches provided by IBM for the affected versions of IBM Business Process Manager and WebSphere Lombardi Edition.
What impact does CVE-2015-0156 have on my system?
CVE-2015-0156 allows remote authenticated users to inject arbitrary web scripts or HTML into IBM Business Process Manager and WebSphere Lombardi, which can lead to unauthorized actions.
Which versions are affected by CVE-2015-0156?
CVE-2015-0156 affects IBM Business Process Manager versions 7.5.x through 8.5.6.0 and WebSphere Lombardi Edition versions 7.2.x through 7.2.0.5.
Is CVE-2015-0156 exploitable without authentication?
CVE-2015-0156 requires authentication, meaning that an attacker must have legitimate user credentials to exploit the vulnerability.