Vulnerabilities > CVE-2016-8608 - Unspecified vulnerability in Redhat products

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
redhat
NVD
Published: 2018-08-01
Updated: 2024-11-21

Summary

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.

Vulnerable Configurations

Part Description Count
Application
Redhat
2

Redhat

advisories
  • rhsa
    idRHSA-2016:2822
  • rhsa
    idRHSA-2016:2823

References