Websphere (Ibm) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2024-05-01. Vendor: Ibm.
CVEs of Websphere
- CVE-2024-28775 - CVSS 5.4 (medium), 2024-05-01: IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
- CVE-2018-1848 - CVSS 6.1 (medium), 2018-12-14: IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
- CVE-2017-1756 - CVSS 4 (medium), 2018-03-30: IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
- CVE-2016-9693 - CVSS 6.1 (medium), 2017-03-07: IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an…
- CVE-2015-1884 - CVSS 4 (medium), 2015-06-28: Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through…
- CVE-2015-0193 - CVSS 3.5 (low), 2015-05-30: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and…
- CVE-2015-0156 - CVSS 3.5 (low), 2015-05-25: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and…
