CVE-2015-0156

no score yetEPSS 1.3%

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2015-05-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:business_process_manager
ibm:websphere

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT06812
http://www-01.ibm.com/support/docview.wss?uid=swg1JR52420
http://www-01.ibm.com/support/docview.wss?uid=swg21697120
http://www-01.ibm.com/support/docview.wss?uid=swg1IT06812
http://www-01.ibm.com/support/docview.wss?uid=swg1JR52420

Check your stack JSON