Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm websphere 7.2 vulnerabilities and exploits
(subscribe to this query)
7.1
CVSSv3
CVE-2018-1421
IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Fo...
Ibm Datapower Gateway
6.5
CVSSv3
CVE-2015-0110
IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL.
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.3
Ibm Websphere Application Server 7.2.0.0
Ibm Websphere Application Server 7.2.0.2
Ibm Websphere Application Server 7.2.0.4
Ibm Websphere Application Server 7.2.0.1
Ibm Websphere Application Server 7.2.0.3
Ibm Websphere Application Server 7.2.0.5
6.1
CVSSv3
CVE-2016-9693
IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a malicious payload. An existing file type restriction can be bypassed so that the payload...
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.2
Ibm Business Process Manager 8.5.6.0
Ibm Business Process Manager 8.5.7.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.5.6.2
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.0.0.0
Ibm Websphere 7.2
Ibm Websphere 7.2.0.1
Ibm Websphere 7.2.0.4
Ibm Websphere 7.2.0.5
Ibm Websphere 7.2.0.2
NA
CVE-2015-1884
Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0.x up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 up to and including 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2 up to and including 7.2....
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.2
Ibm Websphere 7.2.0.3
Ibm Websphere 7.2.0.4
Ibm Websphere 7.2.0.5
Ibm Websphere 7.2.0.1
Ibm Websphere 7.2.0.2
Ibm Websphere 7.2
NA
CVE-2015-0193
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0.x up to and including 8.0.1.3, and 8.5.x up to and including 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x up to and including 7.2.0.5 allows remote authenti...
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.5.0.1
Ibm Websphere 7.2
Ibm Websphere 7.2.0.1
Ibm Websphere 7.2.0.2
Ibm Websphere 7.2.0.4
Ibm Websphere 7.2.0.3
Ibm Websphere 7.2.0.5
NA
CVE-2015-0156
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0.x up to and including 8.0.1.3, and 8.5.x up to and including 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x up to and including 7.2.0.5 allows remote authenti...
Ibm Websphere 7.2.0.3
Ibm Websphere 7.2.0.4
Ibm Websphere 7.2.0.5
Ibm Websphere 7.2
Ibm Websphere 7.2.0.2
Ibm Websphere 7.2.0.1
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.5.6.0
NA
CVE-2015-0106
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0 up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 up to and including 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x up to and includi...
Ibm Websphere Application Server 7.2.0.2
Ibm Websphere Application Server 7.2.0.4
Ibm Websphere Application Server 7.2.0.5
Ibm Websphere Application Server 7.2
Ibm Websphere Application Server 7.2.0.3
Ibm Websphere Application Server 7.1
Ibm Websphere Application Server 7.2.0.1
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.1
NA
CVE-2014-4758
IBM Business Process Manager (BPM) 7.5.x up to and including 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Websphere Application Server 7.2.0.3
Ibm Websphere Application Server 7.2.0.4
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.5.5.0
Ibm Websphere Application Server 7.2
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Websphere Application Server 7.2.0.1
Ibm Websphere Application Server 7.2.0.2
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Websphere Application Server 7.2.0.5
NA
CVE-2014-3075
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web script or HTML via an uploaded file.
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.0.0
Ibm Websphere Application Server 7.2.0.1
Ibm Websphere Application Server 7.2.0.2
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Websphere Application Server 7.2.0.3
Ibm Websphere Application Server 7.2.0.4
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Websphere Application Server 7.2.0.5
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.5.5.0
Ibm Websphere Application Server 7.2
NA
CVE-2014-3087
callService.do in IBM Business Process Manager (BPM) 7.5 up to and including 8.5.5 and WebSphere Lombardi Edition 7.2 up to and including 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity referen...
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Websphere Application Server 7.2
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-52710
arbitrary
CVE-2024-5272
CVE-2024-2961
brute force
remote
CVE-2024-32944
CVE-2024-36241
CVE-2024-5274
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »