https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:39:14.134528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-11750 cnvd-2016-11750 2026-10-03T07:39:14.142345+00:00 cnvd-2016-11750 https://cve.radiocsirt.org/vuln/euvd-2026-87261 EUVD-2026-87261 2026-10-03T07:39:14.142378+00:00 EUVD-2026-87261 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8608 fkie_cve-2016-8608 2026-10-03T07:39:14.142393+00:00

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.

 https://cve.radiocsirt.org/vuln/ghsa-9vxf-m4pg-2r4f GHSA-9vxf-m4pg-2r4f 2026-10-03T07:39:14.142420+00:00

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.

 https://cve.radiocsirt.org/vuln/gsd-2016-8608 gsd-2016-8608 2026-10-03T07:39:14.142436+00:00 gsd-2016-8608 https://cve.radiocsirt.org/vuln/rhsa-2016:2822 RHSA-2016:2822 — Red Hat Security Advisory: Red Hat JBoss BPM Suite security update 2026-10-03T07:39:14.142447+00:00

XStream: enabled processing of external entities Workbench: Path traversal vulnerability Stored XSS in business process editor