CVE-2016-3054 (filenet_workplace)

Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.

Source: CVE-2016-3054 (filenet_workplace)