Login Request a demo
BP
Product
Business Process Manager
by Ibm · last CVE May 31, 2022
88
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities88In the news0Timeline
Severity mix
Critical 0High 6Medium 51Low 2
Severity
All severities88Critical0High6Medium51Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Business Process Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-2000
8.8
1%
Apr 8
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
Affected: 8.6.0.0; 8.6.0.0
CVE-2018-1674
8.8
2%
Sep 20
IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection
Affected: 8.5.0.0 through 8.5.0.2; 8.5.5.0; 8.5.5.0; 8.5.5.0; 8.5.5.0; 8.5.6.0; +8 more
CVE-2017-1769
8.8
1%
Jan 24
IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user…
Affected: 8.6.0.0
CVE-2017-1539
8.8
2%
Sep 26
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships
Affected: 7.5.0.0; 7.5.0.0; 7.5.0.0; 7.5.0.0; 7.5.0.1; 7.5.0.1; +34 more
CVE-2019-4424
8.2
2%
Aug 20
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
Affected: 7.5.0.0 through 7.5.1.2; 8.0.0.0 through 8.0.1.3; 8.5.0.0 through 8.5.0.2; 8.5.5.0; 8.5.6.0; 8.5.6.0; +10 more
CVE-2017-1527
8.1
2%
Sep 26
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
Affected: 7.5.0.0; 7.5.0.0; 7.5.0.0; 7.5.0.0; 7.5.0.1; 7.5.0.1; +34 more
Showing 6