JB
Product
Jboss Bpm Suite
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 2Medium 9Low 0
Watch
Add Jboss Bpm Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5401 | 8.8 | Apr 20 | Cross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances… Affected: 6.0.0 |
| CVE-2016-7034 | 8.8 | Sep 7 | The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for… Affected: 6.3.2 |
Showing 2