Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
service manager automation vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2020-9521
An SQL injection vulnerability exists in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the pr...
Microfocus Service Manager Automation 2019.05
Microfocus Service Manager Automation 2019.02
Microfocus Service Manager Automation 2018.08
Microfocus Service Manager Automation 2018.05
Microfocus Service Manager Automation 2018.02
Microfocus Service Manager Automation 2019.08
NA
CVE-2014-0940
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 prior to 7.2.2.2-TIV-TSAM-LA0041 allow remote malicious users to inject arbitrary web script or HTML via vectors involving the (1) REST API or (2) Self Service UI.
Ibm Tivoli Service Automation Manager 7.2.2.2
5.3
CVSSv3
CVE-2018-1885
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated malicious user to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.
Ibm Business Automation Workflow 18.0.0.2
Ibm Business Automation Workflow 18.0.0.0
Ibm Business Automation Workflow 18.0.0.1
Ibm Business Process Manager 8.6.0.0
Ibm Business Process Manager Enterprise Service Bus 8.6
Ibm Business Process Manager 8.5.7.0
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager
Ibm Business Process Manager 8.5.6.0
Ibm Websphere Enterprise Service Bus
5.4
CVSSv3
CVE-2021-38893
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potenti...
Ibm Business Automation Workflow 18.0.0.0
Ibm Business Automation Workflow 19.0.0.0
Ibm Business Automation Workflow 20.0.0.0
Ibm Business Automation Workflow 21.0.0.0
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.5.7.0
Ibm Business Process Manager 8.6.0.0
Ibm Workflow Process Service 21.0.2
6.5
CVSSv3
CVE-2021-38900
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607.
Ibm Business Process Manager 8.5.0.0
Ibm Business Automation Workflow 18.0.0.1
Ibm Business Automation Workflow 18.0.0.0
Ibm Business Automation Workflow 18.0.0.2
Ibm Business Process Manager 8.6.0.0
Ibm Business Automation Workflow 19.0.0.0
Ibm Business Automation Workflow 20.0.0.0
Ibm Business Automation Workflow 19.0.0.1
Ibm Business Automation Workflow 21.0.0.0
Ibm Workflow Process Service 21.0.2
NA
CVE-2012-4691
Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x prior to 5.2 allows remote malicious users to cause a denial of service (memory consumption) via crafted packets.
Siemens Automation License Manager 5.1
Siemens Automation License Manager 5.0
Siemens Automation License Manager 4.0
5.4
CVSSv3
CVE-2020-4794
IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization chec...
Ibm Automation Workstream Services 19.0.3
Ibm Automation Workstream Services 20.0.1
Ibm Automation Workstream Services 20.0.2
Ibm Business Process Manager 8.0.0.0
Ibm Business Process Manager 8.0.1.0
Ibm Business Process Manager 8.0.1.1
Ibm Business Process Manager 8.0.1.2
Ibm Business Process Manager 8.0.1.3
Ibm Business Process Manager 8.5.0.0
Ibm Business Process Manager 8.5.0.1
Ibm Business Process Manager 8.5.0.2
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.5.6.0
Ibm Business Process Manager 8.5.6.1
Ibm Business Process Manager 8.5.6.2
Ibm Business Process Manager 8.5.7.0
Ibm Business Process Manager 8.6
Ibm Business Automation Workflow 18.0.0.0
Ibm Business Automation Workflow 18.0.0.1
Ibm Business Automation Workflow 18.0.0.2
Ibm Business Automation Workflow 19.0.0.0
Ibm Business Automation Workflow 19.0.0.1
7.5
CVSSv3
CVE-2016-8563
Siemens Automation License Manager (ALM) prior to 5.3 SP3 Update 1 allows remote malicious users to cause a denial of service (ALM service outage) via crafted packets to TCP port 4410.
Siemens Automation License Manager
6.5
CVSSv3
CVE-2018-1997
IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack. An authenticated attacker might send a specially crafted request that exhausts server-side memory. IBM X-Force ID: 154774.
Ibm Business Automation Workflow 18.0.0.2
Ibm Business Automation Workflow 18.0.0.1
Ibm Business Automation Workflow 18.0.0.0
Ibm Business Process Manager 8.6.0.0
Ibm Business Process Manager 8.5.5.0
Ibm Business Process Manager 8.5.7.0
Ibm Business Process Manager 8.5.6.0
NA
CVE-2011-4531
Siemens Automation License Manager (ALM) 4.0 up to and including 5.1+SP1+Upd1 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command.
Siemens Automation License Manager
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661
open redirect
CVE-2024-25512
CVE-2024-33788
command injection
SSTI
CVE-2024-0043
CVE-2024-29210
CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »