CVE-2015-0101

Опубликовано: 28 авг. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; and IBM Business Process Manager Advanced 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21693134
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/72920
Third Party Advisory
VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21693134
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/72920
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:business_process_manager:7.5:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.5:*:*:*:standard:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:business_process_manager:7.5:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.5:*:*:*:express:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:ibm:business_process_manager:7.5:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.5:*:*:*:advanced:*:*:*

EPSS

Процентиль: 45%

0.00224

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-rg6q-43cp-459r

CVSS3: 6.1

github

больше 3 лет назад

EPSS

Процентиль: 45%

0.00224

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79