BP
Product
Business Process Manager Enterprise Service Bus
4
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 1
Watch
Add Business Process Manager Enterprise Service Bus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1384 | 5.4 | Mar 30 | IBM Business Process Manager 8.6 is vulnerable to cross-site scripting Affected: 8.6.0.0 |
| CVE-2018-1885 | 5.3 | Apr 8 | IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request Affected: 8.6 |
| CVE-2017-1765 | 4.3 | Mar 30 | IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server Affected: 8.6.0.0 |
| CVE-2017-1756 | 3.3 | Mar 30 | IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system Affected: 8.6.0.0 |
Showing 4