Page 4 of 84 results (0.003 seconds)

CVSS: 4.3EPSS: 0%CPEs: 59EXPL: 0

CVE-2017-1765

https://notcve.org/view.php?id=CVE-2017-1765

30 Mar 2018 — IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150. La versión 8.6 de IBM Business Process Manager podría permitir que un usuario autenticado con privilegios especiales revele información sensible sobre el servidor de la aplicación. IBM X-Force ID: 136150. • http://www.ibm.com/support/docview.wss?uid=swg22011844 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 35EXPL: 0

CVE-2017-1766

https://notcve.org/view.php?id=CVE-2017-1766

30 Mar 2018 — Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151. Debido a una autorización incorrecta en la versión 8.6 de IBM Business Process Manager, un atacante puede reclamar y trabajar en tareas ad hoc a las que no está asignado. IBM X-Force ID: 136151. • http://www.ibm.com/support/docview.wss?uid=swg22011866 • CWE-863: Incorrect Authorization •

CVSS: 5.4EPSS: 0%CPEs: 30EXPL: 0

CVE-2017-1767

https://notcve.org/view.php?id=CVE-2017-1767

30 Mar 2018 — IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136152. IBM Business Process Manager 8.6 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades prev... • http://www.ibm.com/support/docview.wss?uid=swg22012396 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 100EXPL: 0

CVE-2018-1384

https://notcve.org/view.php?id=CVE-2018-1384

30 Mar 2018 — IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135. IBM Business Process Manager 8.6 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades prev... • http://www.ibm.com/support/docview.wss?uid=swg22012604 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0

CVE-2015-7463

https://notcve.org/view.php?id=CVE-2015-7463

15 Mar 2018 — IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2 allow remote authenticated users to delete process and task data by leveraging incorrect authorization checks. IBM X-Force ID: 108393. IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5 y 8.5.6.0 hasta el fix 2 acumulativo, permite que los usuarios autenticados remotos borren datos de tareas y procesos aprovechándose de las comprobaciones de autorización incorrectas. IBM X-Force ID: 108393. • http://www-01.ibm.com/support/docview.wss?uid=swg21973442 • CWE-285: Improper Authorization •

CVSS: 5.4EPSS: 0%CPEs: 10EXPL: 0

CVE-2017-1494

https://notcve.org/view.php?id=CVE-2017-1494

20 Dec 2017 — IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128692. IBM Business Process Manager 8.5 es vulnerable a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades prev... • http://www.ibm.com/support/docview.wss?uid=swg22008673 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.1EPSS: 0%CPEs: 72EXPL: 0

CVE-2017-1527

https://notcve.org/view.php?id=CVE-2017-1527

26 Sep 2017 — IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156. Las versiones 7.5, 8.0 y 8.5 de IBM Business Process Manager son vulnerables a ataques de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensibl... • http://www.ibm.com/support/docview.wss?uid=swg22007346 • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 5.4EPSS: 0%CPEs: 72EXPL: 0

CVE-2017-1530

https://notcve.org/view.php?id=CVE-2017-1530

26 Sep 2017 — IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130409. Las versiones 7.5, 8.0 y 8.5 de IBM Business Process Manager son vulnerables a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario... • http://www.ibm.com/support/docview.wss?uid=swg22007351 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 72EXPL: 0

CVE-2017-1531

https://notcve.org/view.php?id=CVE-2017-1531

26 Sep 2017 — IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130410. Las versiones 7.5, 8.0 y 8.5 de IBM Business Process Manager son vulnerables a Cross-Site Scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario... • http://www.ibm.com/support/docview.wss?uid=swg22007354 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 0%CPEs: 72EXPL: 0

CVE-2017-1539

https://notcve.org/view.php?id=CVE-2017-1539

26 Sep 2017 — IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships. By manipulating LDAP group membership an attack might gain privileged access. IBM X-Force ID: 130807. Las versiones 7.5, 8.0 y 8.5 de IBM Business Process Manager son vulnerables a un escalado de privilegios debido a que no distinguen entre la pertenencia a un grupo interno o la pertenencia a un grupo de usuarios registrados. Med... • http://www.ibm.com/support/docview.wss?uid=swg22007451 •