Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm websphere 7.2 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-0707
Cross-site scripting (XSS) vulnerability in IBM WebSphere Lombardi Edition 7.2 allows remote malicious users to inject arbitrary web script or HTML via crafted text input to a coach that is configured with a document attachment control section.
Ibm Websphere Application Server 7.2
NA
CVE-2015-1884
Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0.x up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 up to and including 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2 up to and including 7.2....
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.1.1
Ibm Websphere 7.2.0.2
Ibm Websphere 7.2.0.5
Ibm Websphere 7.2.0.4
Ibm Websphere 7.2
Ibm Websphere 7.2.0.3
Ibm Websphere 7.2.0.1
NA
CVE-2015-0193
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0.x up to and including 8.0.1.3, and 8.5.x up to and including 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x up to and including 7.2.0.5 allows remote authenti...
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.1.1
Ibm Websphere 7.2.0.2
Ibm Websphere 7.2.0.5
Ibm Websphere 7.2.0.4
Ibm Websphere 7.2
Ibm Websphere 7.2.0.3
Ibm Websphere 7.2.0.1
NA
CVE-2015-0156
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0.x up to and including 8.0.1.3, and 8.5.x up to and including 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x up to and including 7.2.0.5 allows remote authenti...
Ibm Websphere 7.2.0.2
Ibm Websphere 7.2.0.5
Ibm Websphere 7.2.0.4
Ibm Websphere 7.2
Ibm Websphere 7.2.0.3
Ibm Websphere 7.2.0.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 8.5.6.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.1.1
NA
CVE-2015-0106
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 7.5.1.2, 8.0 up to and including 8.0.1.3, 8.5.0 up to and including 8.5.0.1, and 8.5.5 up to and including 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x up to and includi...
Ibm Websphere Application Server 7.2.0.3
Ibm Websphere Application Server 7.1
Ibm Websphere Application Server 7.2.0.1
Ibm Websphere Application Server 7.2
Ibm Websphere Application Server 7.2.0.2
Ibm Websphere Application Server 7.2.0.5
Ibm Websphere Application Server 7.2.0.4
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.1.1
NA
CVE-2014-4758
IBM Business Process Manager (BPM) 7.5.x up to and including 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.
Ibm Websphere Application Server 7.2.0.3
Ibm Websphere Application Server 7.2
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Websphere Application Server 7.2.0.1
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.5.5.0
Ibm Websphere Application Server 7.2.0.2
Ibm Websphere Application Server 7.2.0.5
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 7.5.0.1
Ibm Websphere Application Server 7.2.0.4
NA
CVE-2014-3075
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x up to and including 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web script or HTML via an uploaded file.
Ibm Websphere Application Server 7.2.0.3
Ibm Websphere Application Server 7.2.0.1
Ibm Websphere Application Server 7.2
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Websphere Application Server 7.2.0.2
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Websphere Application Server 7.2.0.5
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 7.5.0.1
Ibm Websphere Application Server 7.2.0.4
6.1
CVSSv3
CVE-2016-9693
IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a malicious payload. An existing file type restriction can be bypassed so that the payload...
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.5.6.2
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.2
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.5.7.0
Ibm Business Process Manager 7.5.0.1
Ibm Business Process Manager 8.5.6.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 8.0.1.1
Ibm Websphere 7.2.0.2
Ibm Websphere 7.2.0.5
Ibm Websphere 7.2.0.4
Ibm Websphere 7.2
Ibm Websphere 7.2.0.3
6.5
CVSSv3
CVE-2015-0110
IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL.
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 7.5.0.1
Ibm Websphere Application Server 7.2.0.3
Ibm Websphere Application Server 7.2.0.1
Ibm Websphere Application Server 7.2.0.2
Ibm Websphere Application Server 7.2.0.5
Ibm Websphere Application Server 7.2.0.4
Ibm Websphere Application Server 7.2.0.0
NA
CVE-2014-0957
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 up to and including 8.5.5, and WebSphere Lombardi Edition 7.2, allows remote malicious users to inject arbitrary web script or HTML via a crafted URL that triggers a service failure.
Ibm Websphere Application Server 7.2
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 7.5.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 7.5.1.2
Ibm Business Process Manager 7.5.1.1
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 7.5.1.0
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 7.5.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege
CVE-2022-48762
CVE-2022-48751
CVE-2024-37079
CVE-2024-30848
LFI
man-in-the-middle
CVE-2022-48736
CVE-2024-30103
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »