Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm websphere process server vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2015-7454
Business Space in IBM WebSphere Process Server 6.1.2.0 up to and including 7.0.0.5 and Business Process Manager Advanced 7.5.x up to and including 7.5.1.2, 8.0.x up to and including 8.0.1.3, 8.5.0.x up to and including 8.5.0.2, 8.5.5.x up to and including 8.5.5.0, and 8.5.6.x up ...
Ibm Websphere Process Server 6.2.0.2Ibm Websphere Process Server 6.1.2.2Ibm Websphere Process Server 7.0.0.2Ibm Websphere Process Server 7.0.0.1Ibm Websphere Process Server 6.1.2.3Ibm Websphere Process Server 6.1.2.1Ibm Websphere Process Server 7.0Ibm Websphere Process Server 7.0.0.4Ibm Websphere Process Server 7.0.0.5Ibm Websphere Process Server 7.0.0.3Ibm Websphere Process Server 6.2.0.3Ibm Websphere Process Server 6.2Ibm Websphere Process Server 6.2.0.1Ibm Websphere Process Server 6.1.2Ibm Business Process Manager 8.5.6.2Ibm Business Process Manager 8.5.6.1Ibm Business Process Manager 8.0.1.2Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 8.0.1.0Ibm Business Process Manager 8.5.0.2Ibm Business Process Manager 8.5.0.1Ibm Business Process Manager 7.5.1.1
4
CVSSv2
CVE-2009-0507
IBM WebSphere Process Server (WPS) 6.1.2 prior to 6.1.2.3 and 6.2 prior to 6.2.0.1 does not properly restrict configuration data during an export of the cluster configuration file from the administrative console, which allows remote authenticated users to obtain the (1) JMSAPI, (...
Ibm Websphere Process ServerIbm Websphere Process Server 6.1.2Ibm Websphere Process Server 6.1.2.1
4.3
CVSSv2
CVE-2015-0106
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0 up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 up to and including 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x up to and includi...
Ibm Websphere Application Server 7.2.0.2Ibm Websphere Application Server 7.2.0.4Ibm Websphere Application Server 7.2.0.5Ibm Websphere Application Server 7.2Ibm Websphere Application Server 7.2.0.3Ibm Websphere Application Server 7.1Ibm Websphere Application Server 7.2.0.1Ibm Business Process Manager 7.5.1.2Ibm Business Process Manager 8.0.0.0Ibm Business Process Manager 8.0.1.2Ibm Business Process Manager 8.5.0.0Ibm Business Process Manager 7.5.0.1Ibm Business Process Manager 7.5.1.0Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 8.5.5.0Ibm Business Process Manager 7.5.0.0Ibm Business Process Manager 7.5.1.1Ibm Business Process Manager 8.0.1.0Ibm Business Process Manager 8.0.1.3Ibm Business Process Manager 8.5.0.1
4
CVSSv2
CVE-2015-0110
IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL.
Ibm Business Process Manager 7.5.1.0Ibm Business Process Manager 7.5.1.1Ibm Business Process Manager 7.5.1.2Ibm Business Process Manager 8.0.0.0Ibm Business Process Manager 7.5.0.1Ibm Business Process Manager 8.0.1.0Ibm Business Process Manager 8.0.1.2Ibm Business Process Manager 8.5.0.0Ibm Business Process Manager 8.5.0.1Ibm Business Process Manager 8.5.5.0Ibm Business Process Manager 7.5.0.0Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 8.0.1.3Ibm Websphere Application Server 7.2.0.0Ibm Websphere Application Server 7.2.0.2Ibm Websphere Application Server 7.2.0.4Ibm Websphere Application Server 7.2.0.1Ibm Websphere Application Server 7.2.0.3Ibm Websphere Application Server 7.2.0.5
3.5
CVSSv2
CVE-2018-1384
IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...
Ibm Business Process Manager 7.5.0.0Ibm Business Process Manager 8.5.6.2Ibm Business Process Manager 8.0.1.3Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 8.5.7.0Ibm Business Process Manager 8.0.1.0Ibm Business Process Manager 8.0.0.0Ibm Business Process Manager 7.5.1.2Ibm Business Process Manager 7.5.1.1Ibm Business Process Manager 7.5.1.0Ibm Business Process Manager 8.5.6.0Ibm Business Process Manager 8.5.5.0Ibm Business Process Manager 8.5.0.2Ibm Business Process Manager 8.5.0.1Ibm Business Process Manager 8.5.6.1Ibm Business Process Manager 8.5.0.0Ibm Business Process Manager 8.0.1.2Ibm Business Process Manager 7.5.0.1Ibm Websphere Enterprise Service Bus 7.0.0.5Ibm Websphere Enterprise Service Bus 7.5.1.1Ibm Websphere Enterprise Service Bus 7.5.1.2Ibm Websphere Enterprise Service Bus 7.5.1.0
4
CVSSv2
CVE-2014-4758
IBM Business Process Manager (BPM) 7.5.x up to and including 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.
Ibm Business Process Manager 7.5.0.0Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 8.0.1.2Ibm Websphere Application Server 7.2.0.3Ibm Websphere Application Server 7.2.0.4Ibm Business Process Manager 7.5.1.1Ibm Business Process Manager 7.5.1.2Ibm Business Process Manager 8.5.5.0Ibm Websphere Application Server 7.2Ibm Business Process Manager 8.0.0.0Ibm Business Process Manager 8.0.1.0Ibm Websphere Application Server 7.2.0.1Ibm Websphere Application Server 7.2.0.2Ibm Business Process Manager 7.5.0.1Ibm Business Process Manager 7.5.1.0Ibm Business Process Manager 8.5.0.0Ibm Business Process Manager 8.5.0.1Ibm Websphere Application Server 7.2.0.5
3.5
CVSSv2
CVE-2014-3075
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web script or HTML via an uploaded file.
Ibm Business Process Manager 7.5.1.2Ibm Business Process Manager 8.0.0.0Ibm Websphere Application Server 7.2.0.1Ibm Websphere Application Server 7.2.0.2Ibm Business Process Manager 8.0.1.0Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 8.0.1.2Ibm Websphere Application Server 7.2.0.3Ibm Websphere Application Server 7.2.0.4Ibm Business Process Manager 7.5.0.0Ibm Business Process Manager 7.5.0.1Ibm Business Process Manager 8.5.0.0Ibm Business Process Manager 8.5.0.1Ibm Websphere Application Server 7.2.0.5Ibm Business Process Manager 7.5.1.0Ibm Business Process Manager 7.5.1.1Ibm Business Process Manager 8.5.5.0Ibm Websphere Application Server 7.2
4.3
CVSSv2
CVE-2014-6176
IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x up to and including 7.5.1.2, 8.0.x up to and including 8.0.1.3, and 8.5.x up to and including 8.5.5 disregard the SSL setting in the SCA module HTTP import binding ...
Ibm Business Process Manager 8.0.1.0Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 7.5.1.1Ibm Business Process Manager 8.0.0.0Ibm Business Process Manager 8.5.5.0Ibm Business Process Manager 8.0.1.2Ibm Business Process Manager 8.0.1.3Ibm Business Process Manager 7.5.0.0Ibm Business Process Manager 7.5.0.1Ibm Business Process Manager 7.5.1.0Ibm Business Process Manager 8.5.0.0Ibm Business Process Manager 8.5.0.1Ibm Websphere Enterprise Service Bus 7.0Ibm Websphere Process Server 7.0
4.3
CVSSv2
CVE-2014-0957
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 up to and including 8.5.5, and WebSphere Lombardi Edition 7.2, allows remote malicious users to inject arbitrary web script or HTML via a crafted URL that triggers a service failure.
Ibm Business Process Manager 7.5.1.1Ibm Business Process Manager 7.5.1.2Ibm Business Process Manager 8.5.5.0Ibm Business Process Manager 7.5.0.0Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 8.0.1.2Ibm Websphere Application Server 7.2Ibm Business Process Manager 8.0.0.0Ibm Business Process Manager 8.0.1.0Ibm Business Process Manager 7.5.0.1Ibm Business Process Manager 7.5.1.0Ibm Business Process Manager 8.5.0.0Ibm Business Process Manager 8.5.0.1
4
CVSSv2
CVE-2014-3087
callService.do in IBM Business Process Manager (BPM) 7.5 up to and including 8.5.5 and WebSphere Lombardi Edition 7.2 up to and including 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity referen...
Ibm Business Process Manager 8.0.1.0Ibm Business Process Manager 8.0.1.1Ibm Business Process Manager 7.5.0.1Ibm Business Process Manager 7.5.1.0Ibm Business Process Manager 7.5.1.1Ibm Business Process Manager 8.5.0.1Ibm Business Process Manager 8.5.5.0Ibm Websphere Application Server 7.2Ibm Business Process Manager 7.5.0.0Ibm Business Process Manager 8.0.1.2Ibm Business Process Manager 8.5.0.0Ibm Business Process Manager 7.5.1.2Ibm Business Process Manager 8.0.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook