CVE-2014-8913

medium

Description

Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8914.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/99284

http://www.securitytracker.com/id/1031614

http://www-01.ibm.com/support/docview.wss?uid=swg21693239

http://www-01.ibm.com/support/docview.wss?uid=swg1JR51742

http://secunia.com/advisories/62205

Details

Source: Mitre, NVD

Published: 2015-01-21

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 3.5

Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N

Severity: Low

CVSS v3

Base Score: 5.4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.00232