Jbpm (Redhat) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 114 known versions, newest CVE from 2021-06-01. Vendor: Redhat.

CVEs of Jbpm

• CVE-2021-20306 - CVSS 4.3 (medium), 2021-06-01: A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other…
• CVE-2017-7545 - CVSS 6.5 (medium), 2018-07-26: It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker…
• CVE-2013-6465 - CVSS 5.4 (medium), 2017-12-19: Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via…
• CVE-2014-8125 - CVSS 7.5 (high), 2015-04-21: XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified…