Login Request a demo
JB
Product
Jbpm
by Redhat · last CVE Jun 1, 2021
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities4Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jbpm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-7545
6.5
3%
Jul 26
It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files
Affected: 6.5
CVE-2013-6465
5.4
1%
Dec 19
Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task…
Affected: 6.0.0; 6.0.0; 6.0.0; 6.0.0; 6.0.0; 6.0.0; +7 more
CVE-2021-20306
4.3
1%
Jun 1
A flaw was found in the BPMN editor in version jBPM 7.51.0.Final
Affected: 7.51.0
CVE-2014-8125
–
3%
Apr 21
XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted…
Affected: through 6.1.0
Showing 4