Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm business process manager 8.0.1.3 vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2014-6139
The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote authenticated users to bypass intended access restrictions and perform task-instance and process-instance searches by specifying a false value for the filterByCurrentUser parameter.
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.5.0
4.3
CVSSv2
CVE-2015-0105
Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager (BPM) 8.0 up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 up to and including 8.5.5.0 allows remote malicious users to inject arbitrary web script or HTML via ...
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.5.0.1
4.3
CVSSv2
CVE-2015-0158
Cross-site scripting (XSS) vulnerability in the Coach NG framework in IBM Business Process Manager (BPM) 8.0 up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 up to and including 8.5.5.0 allows remote malicious users to inject arbitrary web script or HTML ...
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.5.0
3.5
CVSSv2
CVE-2014-6173
Cross-site scripting (XSS) vulnerability in the Process Inspector in IBM Business Process Manager (BPM) 8.0.x up to and including 8.0.1.3 and 8.5.x up to and including 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
4
CVSSv2
CVE-2014-6182
Directory traversal vulnerability in an export function in the Process Center in IBM Business Process Manager (BPM) 8.0.x up to and including 8.0.1.3 and 8.5.x up to and including 8.5.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.0
3.5
CVSSv2
CVE-2014-8913
Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vul...
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
4
CVSSv2
CVE-2014-4802
The Saved Search Admin component in the Process Admin Console in IBM Business Process Manager (BPM) 8.0 up to and including 8.5.5 does not properly restrict task and instance listings in result sets, which allows remote authenticated users to bypass authorization checks and obtai...
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
3.5
CVSSv2
CVE-2014-8914
Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vul...
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
3.5
CVSSv2
CVE-2015-0103
Multiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process Manager (BPM) 8.0 up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 up to and including 8.5.5.0 allow remote authenticated users to inject arbitrary web scrip...
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.2
3.5
CVSSv2
CVE-2015-4955
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 8.0.x up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, 8.5.5 up to and including 8.5.5.0, and 8.5.6 prior to 8.5.6.0 CF1 allows remote authenticated users to inject arbitrary web script ...
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.5.6.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
administrator privileges
CVE-2024-1579
hardcoded
CVE-2023-20198
CVE-2024-33587
CVE-2024-33449
CVE-2024-4308
HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »