Design/Logic Flaw

IBM Business Process Manager aka BPM 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition aka WLE 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL...

CVE-2015-0110

IBM Business Process Manager aka BPM 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition aka WLE 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL...

CVE-2015-0110

IBM BPM/ WLE are affected by CVE-2015-0110: authenticated remote users can access internal service types via executeServiceByName without proper restrictions. Affected products include IBM BPM Standard/Express/Advanced 7.5.x, 8.0.x, 8.5.x and WebSphere Lombardi Edition 7.2.x. Root cause: lack of ...

CVE-2015-0110: Improper Access Control

IBM Business Process Manager aka BPM 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition aka WLE 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL...

PT-2017-6428

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5.x through 8.5.x WebSphere Lombardi Edition versions 7.2.x Description The issue allows remote authenticated users to bypass intended access restrictions on internal service types. This is achieved via...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Business Process Manager BPM 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 ProcessPortal/jsp/socialPortal/dashboard.jsp, 2...

CVE-2013-0581: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Business Process Manager BPM 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 ProcessPortal/jsp/socialPortal/dashboard.jsp, 2...

PT-2013-2440

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 7.5.1.x through 8.0.1 before FP1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script ...