VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 19, 2017· Updated Jun 17, 2026

CVE-2013-6465

CVE-2013-6465

Description

Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • Kiegroup/Jbpm Wbreferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 6.0.x
  • Red Hat/Jbpm13 versions
    cpe:2.3:a:redhat:jbpm:6.0.0:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:redhat:jbpm:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:alpha7:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:alpha9:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:beta5:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:cr1:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:cr2:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:cr3:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:cr4:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jbpm:6.0.0:cr5:*:*:*:*:*:*
  • JBPM/KIE Workbenchllm-create
    Range: 6.0.x

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.