VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 6, 2013· Updated Jun 16, 2026

CVE-2013-0581

CVE-2013-0581

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) ProcessPortal/jsp/socialPortal/dashboard.jsp, (2) teamworks/executeServiceByName, (3) portal/jsp/viewAdHocReportWizard.do, or (4) rest/bpm/wle/v1/process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • IBM/Business Process Manager5 versions
    cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.5.1.x, 8.0.0.x, 8.0.1 before FP1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.