CVE-2015-0101

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; and IBM Business Process Manager Advanced 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg21693134Mitigation, Vendor Advisory
• http://www.securityfocus.com/bid/72920Third Party Advisory, VDB Entry
• http://www-01.ibm.com/support/docview.wss?uid=swg21693134Mitigation, Vendor Advisory
• http://www.securityfocus.com/bid/72920Third Party Advisory, VDB Entry

Published

Aug 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0095The kernel-mode drivers in Microsoft Windows Server 2003 SP2…
• CVE-2015-0096Untrusted search path vulnerability in Microsoft Windows Ser…
• CVE-2015-0097Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3…
• CVE-2015-0098Task Scheduler in Microsoft Windows 7 SP1 and Windows Server…
• CVE-2015-0099Microsoft Internet Explorer 10 allows remote attackers to ex…
• CVE-2015-0100Microsoft Internet Explorer 8 allows remote attackers to exe…
• CVE-2015-0102IBM Workflow for Bluemix does not set the secure flag for th…8.1
• CVE-2015-0103Multiple cross-site scripting (XSS) vulnerabilities in the P…
• CVE-2015-0104IBM Tivoli IT Asset Management for IT, Tivoli Service Reques…
• CVE-2015-0105Cross-site scripting (XSS) vulnerability in the Process Port…
• CVE-2015-0106Cross-site scripting (XSS) vulnerability in IBM Business Pro…
• CVE-2015-0107IBM Tivoli IT Asset Management for IT, Tivoli Service Reques…