4

CVE-2014-4759

EPSS 0.18%
Veröffentlicht 04.09.2014 10:55:07
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM) 8.5.x through 8.5.5 allows remote authenticated users to obtain sensitive information by performing a document-attachment search and then reading document properties in the search results.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Business Process Manager Version8.5.0.0

Ibm ≫ Business Process Manager Version8.5.0.1

Ibm ≫ Business Process Manager Version8.5.5.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.362

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

http://www-01.ibm.com/support/docview.wss?uid=swg1JR50871

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21680809

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/94486

https://nvd.nist.gov/vuln/detail/CVE-2014-4759

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4759

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4759

EUVD