IBM Security Bulletin: Cross Site Scripting vulnerability in IBM Business Process Manager (CVE-2016-5901)

A test page that is vulnerabile to cross site scripting has been packaged with IBM Business Process Manager.

CVE(s): CVE-2016-5901

Affected product(s) and affected version(s):

• IBM Business Process Manager Advanced V8.5.6.0 – V8.5.7.0 prior to cumulative fix 2016.09

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2d0fQbQ
X-Force Database: http://ift.tt/2dFDWG9

from IBM Product Security Incident Response Team http://ift.tt/2d0eH44