Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:51:51 +0000 cnvd-2016-11750 https://cve.radiocsirt.org/vuln/cnvd-2016-11750 cnvd-2016-11750 https://cve.radiocsirt.org/vuln/cnvd-2016-11750 EUVD-2026-87261 https://cve.radiocsirt.org/vuln/euvd-2026-87261 EUVD-2026-87261 https://cve.radiocsirt.org/vuln/euvd-2026-87261 fkie_cve-2016-8608 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8608 <p>JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.</p> <p>JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-8608 GHSA-9vxf-m4pg-2r4f https://cve.radiocsirt.org/vuln/ghsa-9vxf-m4pg-2r4f <p>JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.</p> <p>JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.</p> https://cve.radiocsirt.org/vuln/ghsa-9vxf-m4pg-2r4f gsd-2016-8608 https://cve.radiocsirt.org/vuln/gsd-2016-8608 gsd-2016-8608 https://cve.radiocsirt.org/vuln/gsd-2016-8608 RHSA-2016:2822 — Red Hat Security Advisory: Red Hat JBoss BPM Suite security update https://cve.radiocsirt.org/vuln/rhsa-2016:2822 <p>XStream: enabled processing of external entities Workbench: Path traversal vulnerability Stored XSS in business process editor</p> <p>XStream: enabled processing of external entities Workbench: Path traversal vulnerability Stored XSS in business process editor</p> https://cve.radiocsirt.org/vuln/rhsa-2016:2822