CVE-2015-0103

Multiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified data fields.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR50457Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21693270Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR50457Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21693270Patch, Vendor Advisory

Published

Mar 24, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0097Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3…
• CVE-2015-0098Task Scheduler in Microsoft Windows 7 SP1 and Windows Server…
• CVE-2015-0099Microsoft Internet Explorer 10 allows remote attackers to ex…
• CVE-2015-0100Microsoft Internet Explorer 8 allows remote attackers to exe…
• CVE-2015-0101Cross-site scripting (XSS) vulnerability in IBM Business Pro…
• CVE-2015-0102IBM Workflow for Bluemix does not set the secure flag for th…8.1
• CVE-2015-0104IBM Tivoli IT Asset Management for IT, Tivoli Service Reques…
• CVE-2015-0105Cross-site scripting (XSS) vulnerability in the Process Port…
• CVE-2015-0106Cross-site scripting (XSS) vulnerability in IBM Business Pro…
• CVE-2015-0107IBM Tivoli IT Asset Management for IT, Tivoli Service Reques…
• CVE-2015-0108Cross-site scripting (XSS) vulnerability in IBM Maximo Asset…
• CVE-2015-0109Cross-site scripting (XSS) vulnerability in IBM Maximo Asset…