[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2015-4955":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":58,"references":60,"score":66,"epss_score":67,"epss_percentile":68,"is_kev":69,"cisa_kev_date_added":70,"cisa_kev_due_date":70,"cisa_ssvc":71,"attack_mappings":77,"exploits":84},186179,"CVE-2015-4955","EUVD-2015-4972","Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 before 8.5.6.0 CF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.","2015-10-03T22:59:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":18},"2.0",3.5,"NETWORK","AV:N\u002FAC:M\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL","MEDIUM","NONE",true,[21],"CWE-79",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57],"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",[59],"Ibm Business Process Manager",[61,62,63,64,65],"http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg1JR52696","http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg1JR53179","http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg1JR54007","http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg21966010","http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1033733",0.38,0.01365,0.71634,false,null,{"timestamp":70,"automatable":72,"tech_impact":73,"exploitation":74,"cisa_decision":75,"cisa_remediation_timeline":76},"no","partial","none",{},"FSU",[78],{"name":79,"source":80,"tactics":81,"technique_id":83},"Exploit Public-Facing Application","attack_vector",[82],"initial-access","T1190",[]]