CVE-2018-1384: XSS

First published: Fri Mar 30 2018(Updated: )

IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135.

Credit: psirt@us.ibm.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/severity
• agent/references
• agent/author
• agent/type
• agent/event
• vendor/ibm
• canonical/ibm business process manager
• version/ibm business process manager/7.5.0.0
• version/ibm business process manager/7.5.0.1
• version/ibm business process manager/7.5.1.0
• version/ibm business process manager/7.5.1.1
• version/ibm business process manager/7.5.1.2
• version/ibm business process manager/8.0.0.0
• version/ibm business process manager/8.0.1.0
• version/ibm business process manager/8.0.1.1
• version/ibm business process manager/8.0.1.2
• version/ibm business process manager/8.0.1.3
• version/ibm business process manager/8.5.0.0
• version/ibm business process manager/8.5.0.1
• version/ibm business process manager/8.5.0.2
• version/ibm business process manager/8.5.5.0
• version/ibm business process manager/8.5.6.0
• version/ibm business process manager/8.5.6.1
• version/ibm business process manager/8.5.6.2
• version/ibm business process manager/8.5.7.0
• version/ibm business process manager/8.5.7.0-cf201606
• version/ibm business process manager/8.5.7.0-cf201609
• version/ibm business process manager/8.5.7.0-cf201612
• version/ibm business process manager/8.5.7.0-cf201703
• version/ibm business process manager/8.5.7.0-cf201706
• canonical/ibm websphere enterprise service bus
• version/ibm websphere enterprise service bus/7.0.0.0
• version/ibm websphere enterprise service bus/7.0.0.1
• version/ibm websphere enterprise service bus/7.0.0.2
• version/ibm websphere enterprise service bus/7.0.0.3
• version/ibm websphere enterprise service bus/7.0.0.4
• version/ibm websphere enterprise service bus/7.0.0.5
• version/ibm websphere enterprise service bus/7.5.0.0
• version/ibm websphere enterprise service bus/7.5.0.1
• version/ibm websphere enterprise service bus/7.5.1.0
• version/ibm websphere enterprise service bus/7.5.1.1
• version/ibm websphere enterprise service bus/7.5.1.2
• canonical/ibm websphere process server
• version/ibm websphere process server/7.0
• version/ibm websphere process server/7.0.0.1
• version/ibm websphere process server/7.0.0.2
• version/ibm websphere process server/7.0.0.3
• version/ibm websphere process server/7.0.0.4
• version/ibm websphere process server/7.0.0.5
• canonical/ibm business process manager enterprise service bus
• version/ibm business process manager enterprise service bus/8.6.0.0
• version/ibm business process manager/8.6.0.0
• version/ibm business process manager/8.6.0.0-cf201712