Business Process Manager Advanced (Ibm) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2020-05-29. Vendor: Ibm.

CVEs of Business Process Manager Advanced

CVE-2020-4490 - CVSS 6.1 (medium), 2020-05-29: IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions,…
CVE-2017-1494 - CVSS 5.4 (medium), 2017-12-20: IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2017-1530 - CVSS 5.4 (medium), 2017-09-26: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2017-1527 - CVSS 8.1 (high), 2017-09-26: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could…
CVE-2017-1539 - CVSS 8.8 (high), 2017-09-26: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user…
CVE-2017-1425 - CVSS 5.4 (medium), 2017-09-26: IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2017-1531 - CVSS 5.4 (medium), 2017-09-26: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2017-1424 - CVSS 5.4 (medium), 2017-09-25: IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2017-1140 - CVSS 5.4 (medium), 2017-06-08: IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…