CVE-2017-1140: XSS
IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1140?
CVE-2017-1140 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2017-1140?
To fix CVE-2017-1140, IBM recommends applying the latest patches or updates for IBM Business Process Manager.
Which versions of IBM Business Process Manager are affected by CVE-2017-1140?
CVE-2017-1140 affects IBM Business Process Manager versions 8.0 and 8.5.
What are the potential consequences of exploiting CVE-2017-1140?
Exploiting CVE-2017-1140 could lead to the disclosure of sensitive information, such as user credentials, in a trusted session.
Is cross-site scripting in CVE-2017-1140 easily exploitable?
Yes, cross-site scripting vulnerabilities like CVE-2017-1140 can be exploited easily if an attacker can inject malicious JavaScript into the Web UI.