CVE-2014-0957

Published: Jul 18, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 through 8.5.5, and WebSphere Lombardi Edition 7.2, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers a service failure.

Affected (13)

Products: Ibm: Business Process Manager, Websphere Application Server

Ibm

2 products

Business Process Manager

Websphere Application Server

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ibm Business Process Manager	Version 7.5.0.0
Ibm Business Process Manager	Version 7.5.0.1
Ibm Business Process Manager	Version 7.5.1.0
Ibm Business Process Manager	Version 7.5.1.1
Ibm Business Process Manager	Version 7.5.1.2
Ibm Business Process Manager	Version 8.0.0.0
Ibm Business Process Manager	Version 8.0.1.0
Ibm Business Process Manager	Version 8.0.1.1
Ibm Business Process Manager	Version 8.0.1.2
Ibm Business Process Manager	Version 8.5.0.0
Ibm Business Process Manager	Version 8.5.0.1
Ibm Business Process Manager	Version 8.5.5.0
Ibm Websphere Application Server	Version 7.2