It was found that Task Filter List in business central accepts HTML tags in the Name field. When creating a new task filtered list with crafted Name field and deleting it, HTML code is rendered. Upstream bug: https://issues.jboss.org/browse/RHBPMS-4625
Acknowledgments: Name: Chris Hebert, Vikas Pandey, Harold Schliesske, Ryan Stanley (Noblis)
This issue has been addressed in the following products: Red Hat JBoss BPM Suite 6.4.3 Via RHSA-2017:1218 https://access.redhat.com/errata/RHSA-2017:1218
This issue has been addressed in the following products: Red Hat JBoss BRMS 6.4.3 Via RHSA-2017:1217 https://access.redhat.com/errata/RHSA-2017:1217