Ibm

Business Process Manager

88 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2020-4530

  • EPSS 0.18%
  • Veröffentlicht 15.09.2020 14:15:14
  • Zuletzt bearbeitet 21.11.2024 05:32:51

IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionalit...

5.4

CVE-2020-4698

  • EPSS 0.22%
  • Veröffentlicht 08.09.2020 15:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:08

IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

5.4

CVE-2020-4516

  • EPSS 0.06%
  • Veröffentlicht 08.09.2020 15:15:12
  • Zuletzt bearbeitet 21.11.2024 05:32:50

IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functi...

5.4

CVE-2020-4557

  • EPSS 0.24%
  • Veröffentlicht 29.06.2020 14:15:12
  • Zuletzt bearbeitet 21.11.2024 05:32:54

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun...

5.3

CVE-2020-4532

  • EPSS 0.18%
  • Veröffentlicht 17.06.2020 18:15:12
  • Zuletzt bearbeitet 21.11.2024 05:32:51

IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in...

6.1

CVE-2020-4490

  • EPSS 0.12%
  • Veröffentlicht 29.05.2020 13:15:09
  • Zuletzt bearbeitet 21.11.2024 05:32:48

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redire...

4.3

CVE-2020-4446

  • EPSS 0.08%
  • Veröffentlicht 06.05.2020 14:15:11
  • Zuletzt bearbeitet 21.11.2024 05:32:44

IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security restrictions, caused by the failure to perform insufficient authorization checks. IBM X-Force ID: 18112...

6.5

CVE-2019-4669

  • EPSS 0.27%
  • Veröffentlicht 27.02.2020 16:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:57

IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0.1 through 19.0.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL stateme...

5.4

CVE-2019-4149

  • EPSS 0.28%
  • Veröffentlicht 05.09.2019 15:15:12
  • Zuletzt bearbeitet 21.11.2024 04:43:14

IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0 Cumulative Fix 2018.03, V8.5.7.0 through V8.5.7.0 Cumulative Fix 2017.06, and V8.5.6.0 through V8.5.6.0 CF2 is vulnerable to cross...

8.2

CVE-2019-4424

  • EPSS 0.37%
  • Veröffentlicht 20.08.2019 20:15:13
  • Zuletzt bearbeitet 21.11.2024 04:43:35

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive info...