IBM Business Process Manager Advanced
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-4490 | 8.0 ; 8.0.1 ; 8.0.1.1 ; … | IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass secur | MEDIUM 6.1 | 0.9 % | ||
| CVE-2017-1494 | 8.5.5 ; 8.5.6 ; 8.5.7 ; … | IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i | MEDIUM 5.4 | 0.8 % | ||
| CVE-2017-1539 | 7.5 ; 7.5.0.1 ; 7.5.1 ; … | IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group membershi | HIGH 8.8 | 1.5 % | ||
| CVE-2017-1531 | 7.5 ; 7.5.0.1 ; 7.5.1 ; … | IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1530 | 7.5 ; 7.5.0.1 ; 7.5.1 ; … | IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1527 | 7.5 ; 7.5.0.1 ; 7.5.1 ; … | IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A rem | HIGH 8.1 | 2.0 % | ||
| CVE-2017-1425 | 8.0.1.1 ; 8.5.7 ; 8.5.7.CF201609 ; … | IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1424 | 8.5.7 ; 8.5.7.CF201609 ; 8.5.7.CF201606 ; … | IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1140 | 8.0 ; 8.0.1 ; 8.0.1.1 ; … | IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri | MEDIUM 5.4 | 0.7 % |