CVE-2016-3056

Cross-site scripting (XSS) vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR56300Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21990850Vendor Advisory
• http://www.securityfocus.com/bid/93405
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR56300Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21990850Vendor Advisory
• http://www.securityfocus.com/bid/93405

Published

Oct 14, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3049IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable t…
• CVE-2016-3051IBM Security Access Manager for Web 9.0.0 could allow an aut…
• CVE-2016-3052Under non-standard configurations, IBM WebSphere MQ might se…
• CVE-2016-3053IBM AIX contains an unspecified vulnerability that would all…
• CVE-2016-3054Cross-site scripting (XSS) vulnerability in IBM FileNet Work…
• CVE-2016-3055IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows rem…
• CVE-2016-3057Cross-site scripting (XSS) vulnerability in IBM Sterling B2B…
• CVE-2016-3059IBM Tivoli Storage Manager for Databases: Data Protection fo…
• CVE-2016-3060Payments Director in IBM Financial Transaction Manager (FTM)…
• CVE-2016-3062The mov_read_dref function in libavformat/mov.c in Libav bef…
• CVE-2016-3063Multiple functions in NetApp OnCommand System Manager before…
• CVE-2016-3064NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before …