CVE-2016-3055
- EPSS 0.55%
- Published 01.12.2016 11:59:09
- Last modified 12.04.2025 10:46:40
IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity declaration in conjunction with an entity ...
CVE-2016-3047
- EPSS 0.09%
- Published 01.12.2016 11:59:08
- Last modified 12.04.2025 10:46:40
Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2016-5981
- EPSS 0.14%
- Published 25.11.2016 03:59:12
- Last modified 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remot...
CVE-2016-5878
- EPSS 0.11%
- Published 08.08.2016 01:59:18
- Last modified 12.04.2025 10:46:40
Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2016-3054
- EPSS 0.17%
- Published 08.08.2016 01:59:13
- Last modified 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file.