CVE-2016-5901

Cross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative fix 2016.09 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR56391Mitigation, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21990852Patch, Vendor Advisory
• http://www.securityfocus.com/bid/93353
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR56391Mitigation, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21990852Patch, Vendor Advisory
• http://www.securityfocus.com/bid/93353

Published

Oct 5, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5894IBM WebSphere Commerce Enterprise, Professional, Express, an…
• CVE-2016-5896IBM Maximo Asset Management could disclose sensitive informa…
• CVE-2016-5897IBM Jazz Reporting Service (JRS) is vulnerable to HTML injec…
• CVE-2016-5898IBM Jazz Reporting Service (JRS) could allow a remote attack…
• CVE-2016-5899IBM Jazz Reporting Service (JRS) is vulnerable to cross-site…
• CVE-2016-5900IBM Tealeaf Customer Experience on Cloud Network Capture Add…
• CVE-2016-5902IBM Maximo Asset Management is vulnerable to cross-site scri…
• CVE-2016-5905Cross-site scripting (XSS) vulnerability in IBM Maximo Asset…
• CVE-2016-5918IBM Tivoli Storage Manager HSM for Windows displays the encr…
• CVE-2016-5919IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 …
• CVE-2016-5920Cross-site scripting (XSS) vulnerability in the Web UI in IB…
• CVE-2016-5927IBM Tivoli Storage Manager for Space Management (aka Spectru…