JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central.

Published 8 y ago 2018-07-27 · modified 4 mo ago 2026-06-17 · JSON

CVSS

6.1

v3.0 · CNA

CISA KEV

not known exploited

EPSS

1.3%

percentile 70%

Public exploits

none known

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in them, which are not properly sanitized before showing to other users, including admins.

Exploit prediction (EPSS)

1.29% probability of exploitation in the next 30 days, higher than 70% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	6.1	`CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`
CNA	3.0	6.1	`CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`
NVD	3.0	5.4	`CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N`
NVD	2.0	3.5	`AV:N/AC:M/Au:S/C:N/I:P/A:N`

Affected products

Red Hat business-central

Classification

Weakness

CWE-20 Improper Input Validation
CWE-79 Improper Neutralization of Input During Web Page Generation

References

access.redhat.com /errata/RHSA-2017:1217 · vendor-advisory, x_refsource_REDHAT, x_transferred
access.redhat.com /errata/RHSA-2017:1218 · vendor-advisory, x_refsource_REDHAT, x_transferred
bugzilla.redhat.com /show_bug.cgi?id=CVE-2017-2674 · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/98390 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2017-2674
NVD: CVE-2017-2674

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.