Ibm Business Process Manager vulnerabilities
89 known vulnerabilities affecting ibm/business_process_manager.
Total CVEs
89
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH6MEDIUM69LOW13
Vulnerabilities
Page 5 of 5
CVE-2014-4759P4MEDIUMCVSS 4.0v8.5.0.0v8.5.0.1+1 more2014-09-04
CVE-2014-4759 [MEDIUM] CWE-264 CVE-2014-4759: An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM)
An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM) 8.5.x through 8.5.5 allows remote authenticated users to obtain sensitive information by performing a document-attachment search and then reading document properties in the search results.
nvd
CVE-2015-4955P4LOWCVSS 3.5v8.0.0.0v8.0.1.0+7 more2015-10-03
CVE-2015-4955 [LOW] CWE-79 CVE-2015-4955: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 before 8.5.6.0 CF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2014-8913P4LOWCVSS 3.5v8.0.0.0v8.0.1.0+6 more2015-01-21
CVE-2014-8913 [LOW] CWE-79 CVE-2014-8913: Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 t
Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8914.
nvd
CVE-2013-0581P4LOWCVSS 3.5v7.5.1.0v7.5.1.1+2 more2013-07-06
CVE-2013-0581 [LOW] CWE-79 CVE-2013-0581: Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8
Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) ProcessPortal/jsp/socialPortal/dashboard.jsp, (2) teamworks/executeServiceByName, (3) portal/jsp/viewAdHocReportWizard.do, or (4)
nvd
CVE-2015-0193P4LOWCVSS 3.5v7.5.0.0v7.5.0.1+11 more2015-05-30
CVE-2015-0193 [LOW] CWE-79 CVE-2015-0193: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL that triggers an error condition.
nvd
CVE-2015-0103P4LOWCVSS 3.5v8.0.0.0v8.0.1.0+6 more2015-03-24
CVE-2015-0103 [LOW] CWE-79 CVE-2015-0103: Multiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process Ma
Multiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified data fields.
nvd
CVE-2014-3075P4LOWCVSS 3.5v7.5.0.0v7.5.0.1+10 more2014-09-04
CVE-2014-3075 [LOW] CWE-79 CVE-2014-3075: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 8.5.5 a
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web script or HTML via an uploaded file.
nvd
CVE-2017-1756P4LOWCVSS 3.3v7.5.0.0v7.5.0.1+18 more2018-03-30
CVE-2017-1756 [LOW] CWE-200 CVE-2017-1756: IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another
IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
nvd
CVE-2017-1346P4LOWCVSS 2.5v7.5.0.0v7.5.0.1+16 more2017-09-25
CVE-2017-1346 [LOW] CWE-200 CVE-2017-1346: IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during
IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user within a short timespan. IBM X-Force ID: 126461.
nvd
← Previous5 / 5