VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Oct 14, 2016· Updated Jun 17, 2026

CVE-2016-3056

CVE-2016-3056

Description

Cross-site scripting (XSS) vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

70
  • IBM/Business Process Manager69 versions
    cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*+ 68 more
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*
    • (no CPE)
  • IBM/Business Spacellm-create

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.