Redhat

Jboss Bpm Suite

18 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2018-19362

  • EPSS 6.78%
  • Published 02.01.2019 18:29:00
  • Last modified 21.11.2024 03:57:48

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

9.8

CVE-2018-19361

  • EPSS 4.06%
  • Published 02.01.2019 18:29:00
  • Last modified 21.11.2024 03:57:48

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

9.8

CVE-2018-19360

  • EPSS 6.78%
  • Published 02.01.2019 18:29:00
  • Last modified 21.11.2024 03:57:48

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

5.4

CVE-2016-6343

  • EPSS 0.37%
  • Published 31.10.2018 13:29:00
  • Last modified 21.11.2024 02:55:56

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts....

5.4

CVE-2016-8608

  • EPSS 0.18%
  • Published 01.08.2018 14:29:00
  • Last modified 21.11.2024 02:59:39

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in th...

6.1

CVE-2017-7463

  • EPSS 0.66%
  • Published 27.07.2018 18:29:01
  • Last modified 21.11.2024 03:31:57

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML code verbatim without filtering out scripts. Succe...

5.4

CVE-2017-2674

  • EPSS 0.18%
  • Published 27.07.2018 18:29:01
  • Last modified 21.11.2024 03:23:57

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to creat...

6.5

CVE-2017-2658

  • EPSS 0.32%
  • Published 27.07.2018 18:29:01
  • Last modified 21.11.2024 03:23:55

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests....

6.5

CVE-2017-7545

  • EPSS 0.86%
  • Published 26.07.2018 15:29:00
  • Last modified 21.11.2024 03:32:08

It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, ...

10

CVE-2015-7501

  • EPSS 71.46%
  • Published 09.11.2017 17:29:00
  • Last modified 20.04.2025 01:37:25

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x...