CVE-2017-1424: XSS
IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127477.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1424?
The severity of CVE-2017-1424 is classified as high due to the potential for credential disclosure.
How do I fix CVE-2017-1424?
To fix CVE-2017-1424, upgrade IBM Business Process Manager to the latest version that addresses this vulnerability.
What impact does CVE-2017-1424 have on users?
CVE-2017-1424 allows attackers to inject malicious JavaScript into the Web UI, potentially compromising user credentials.
Is CVE-2017-1424 exploitable remotely?
Yes, CVE-2017-1424 can be exploited remotely if a user visits a maliciously crafted web page.
Which versions of IBM Business Process Manager are affected by CVE-2017-1424?
IBM Business Process Manager version 8.5.7.0 is specifically affected by CVE-2017-1424.