| Package | Affected versions | Patched versions |
|---|---|---|
| jboss bpm suite | ≥ 6.0.0, < 6.4.2 | 6.4.2 |
JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free