CVE-2013-6465

Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:jbpm:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:alpha7:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:alpha9:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:beta3:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:beta4:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:beta5:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:cr1:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:cr2:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:cr3:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:cr4:*:*:*:*:*:*
cpe:2.3:a:redhat:jbpm:6.0.0:cr5:*:*:*:*:*:*

History

No history.

Information

Published : 2017-12-19 19:29

Updated : 2024-02-04 19:29


NVD link : CVE-2013-6465

Mitre link : CVE-2013-6465

CVE.ORG link : CVE-2013-6465


JSON object : View

Products Affected

redhat

  • jbpm
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')