CVE-2016-5401: Red Hat JBoss Bpm Suite

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances via a crafted web page.

Affected products

• Red Hat JBoss Bpm Suite: version 6.0.0 only
• Red Hat JBoss Enterprise Brms Platform: version 6.0.0 only

Published 2017-04-20. Last modified 2026-06-17.