3 results (0.009 seconds)

CVSS: 5.4EPSS: 0%CPEs: 13EXPL: 0

CVE-2013-6465

https://notcve.org/view.php?id=CVE-2013-6465

19 Dec 2017 — Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs. Múltiples vulnerabilidades Cross-Site Scripting (XSS) en JBPM KIE Workbench 6.0.x permiten que los usuarios autenticados remotos inyecten scripts web o HTML arbitrarios a través de vectores relacionados con las entradas HTML de nombres de tareas. • https://bugzilla.redhat.com/show_bug.cgi?id=1048380 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2014-8125 – jBPM: BPMN2 file processing XXE in Process Execution

https://notcve.org/view.php?id=CVE-2014-8125

17 Apr 2015 — XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file. Vulnerabilidad de entidad externa XML (XXE) en Drools and jBPM anterior a 6.2.0 permite a atacantes remotos leer ficheros arbitrarios o posiblemente tener otro impacto no especificado a través de un fichero BPMN2 manipulado. It was discovered that the jBPM runtime performed expansion of external parameter entities while ex... • http://rhn.redhat.com/errata/RHSA-2015-0850.html • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 7.5EPSS: 2%CPEs: 3EXPL: 0

CVE-2014-3682 – jbpm-designer: XXE in BPMN2 import

https://notcve.org/view.php?id=CVE-2014-3682

17 Feb 2015 — XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file. Vulnerabilidad de entidad externa XML (XXE) en la función JBPMBpmn2ResourceImpl en designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java en jbpm-designer 6.0.x y 6.2.x permite a atacantes remotos leer ficheros arbitrarios y ... • http://rhn.redhat.com/errata/RHSA-2015-0234.html • CWE-611: Improper Restriction of XML External Entity Reference •