CVE-2017-1425

IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127478.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22006265Vendor Advisory
• http://www.securityfocus.com/bid/100961Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/127478VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22006265Vendor Advisory
• http://www.securityfocus.com/bid/100961Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/127478VDB Entry, Vendor Advisory

Published

Sep 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14244An authentication bypass vulnerability on iBall Baton ADSL2+…9.8
• CVE-2017-14245An out of bounds read in the function d2alaw_array() in alaw…
• CVE-2017-14246An out of bounds read in the function d2ulaw_array() in ulaw…
• CVE-2017-14247SQL Injection exists in the EyesOfNetwork web interface (aka…
• CVE-2017-14248A heap-based buffer over-read in SampleImage() in MagickCore…
• CVE-2017-14249ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImag…
• CVE-2017-14250Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-14251Unrestricted File Upload vulnerability in the fileDenyPatter…
• CVE-2017-14252SQL Injection exists in the EyesOfNetwork web interface (aka…
• CVE-2017-14257In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSamp…
• CVE-2017-14258In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4Stsc…
• CVE-2017-14259In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap…