CVE-2013-6465

Published: Dec 19, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs.

Affected (13)

Products: Redhat: Jbpm

Redhat

1 product

Jbpm

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Redhat Jbpm	Version 6.0.0
Redhat Jbpm	Version 6.0.0 alpha7
Redhat Jbpm	Version 6.0.0 alpha9
Redhat Jbpm	Version 6.0.0 beta1
Redhat Jbpm	Version 6.0.0 beta2
Redhat Jbpm	Version 6.0.0 beta3
Redhat Jbpm	Version 6.0.0 beta4
Redhat Jbpm	Version 6.0.0 beta5
Redhat Jbpm	Version 6.0.0 cr1
Redhat Jbpm	Version 6.0.0 cr2
Redhat Jbpm	Version 6.0.0 cr3
Redhat Jbpm	Version 6.0.0 cr4
Redhat Jbpm	Version 6.0.0 cr5