Security Bulletin: Vulnerability in SSLv3 affects FileNet Content Manager, FileNet BPM and IBM Content Foundation (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is a configurable option in FileNet Content Manager and FileNet BPM products. If using SSLv3 with these products, please refer to the sections below to...

File Upload Vulnerability in Collaborative Office Platform of Microsoft Technology (Hangzhou) Co.

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. A file upload vulnerability exists in the Collaboration Office platform of Microhome Software Technology Hangzhou Co., Ltd, whi...

SQL Injection Vulnerability in Jeecg Boot of Beijing National Torch Information Technology Co. Ltd (CNVD-2021-47665)

Jeecg Boot is a low-code BPM-based platform. A SQL injection vulnerability exists in JeecgBoot of Beijing National Torch Information Technology Co. Ltd, which can be exploited by an attacker to obtain sensitive information from a database...

VulnCheck KEV: CVE-2016-9563

SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated users to conduct XML External Entity XXE attacks...

Unauthorized Access Vulnerability in AGILE-BPM Process Management Platform

Shenzhen Dasi Tongzhou Information Technology Co., Ltd. is a company that focuses on the implementation of enterprise process, according to the customer's own situation to provide the most reasonable process solutions. An unauthorized access vulnerability exists in AGILE-BPM process management...

CVE-2021-23272

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting XSS attack o...

CVE-2021-23272

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting XSS attack o...

Cross site scripting

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting XSS attack o...

CVE-2021-23272

CVE-2021-23272 affects TIBCO BPM Enterprise (versions 4.3.0 and below) and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric (versions 4.3.0 and below). The vulnerability is in the Application Development Clients component and can enable a Cross Site Scripting (XSS) attack by a low-privil...

CVE-2021-23272 TIBCO BPM Cross Site Scripting (XSS)

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting XSS attack o...

CVE-2021-23272

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting XSS attack o...

SQL Injection Vulnerability in BPM Business System of Shanghai Yizheng Information Technology Co.

Ltd. was founded in January 2008, specializing in providing enterprise customers with BPM Business Process Management system development, sales and customized business process management solution services. A SQL injection vulnerability exists in the BPM business system of Shanghai Yizheng...

Micrium Tibco BPM Enterprise Cross-Site Scripting Vulnerability

Tibco BPM Enterprise is a business process management platform from Tibco USA. The platform enables companies to drive digital transformation by making better decisions and acting faster and smarter. TIBCO Software Inc. A cross-site scripting vulnerability exists in TIBCO BPM Enterprise and TIBCO...

TIBCO Security Advisory: January 26, 2021 - TIBCO BPMEnterprise

TIBCO BPM Cross Site Scripting XSS Original release date: January 26, 2021 Lastrevised: CVE-2021-23272 Source: TIBCO SoftwareInc. TIBCO BPM Cross Site Scripting XSS Original release date: January 26, 2021 Last revised: --- Source: TIBCO Software Inc. Systems Affected TIBCO BPM Enterprise versions...

Logic Flaw Vulnerability in FlowPortal BPM Business System of Shanghai Yi Zheng Information Technology Co.

FlowPortal BPM is a business process system from Shanghai Ezine Information Technology Co. A logic flaw vulnerability exists in the FlowPortal BPM business system of Shanghai Yizheng Information Technology Co. Ltd. that can be exploited by an attacker to construct any user's identity information ...

The vulnerability of the Report Generator component in applications for creating reports with the TIBCO JasperReports Library, JasperReports Library for ActiveMatrix BPM, JasperReports Server, JasperReports Server for AWS Marketplace, and JasperReports Server for ActiveMatrix BPM allows attackers to escalate their privileges.

The vulnerability of the Report Generator component in applications for creating reports, such as the TIBCO JasperReports Library, JasperReports Library for ActiveMatrix BPM, JasperReports Server, JasperReports Server for AWS Marketplace, and JasperReports Server for ActiveMatrix BPM, is related ...

CVE-2020-4530

IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

Unspecified vulnerability in Venki Supravizio BPM (CNVD-2021-17753)

Venki Supravizio BPM is a process management solution from Venki Brazil. A security vulnerability exists in Venki Supravizio BPM version 10.1.2, which stems from the program not limiting the number of authentication attempts. An attacker can use this vulnerability to conduct brute force...

Unspecified vulnerability in Venki Supravizio BPM

Venki Supravizio BPM is a process management solution from Venki Brazil. A security vulnerability exists in Venki Supravizio BPM version 10.1.2. An attacker could exploit the vulnerability to determine if a username is valid and then conduct a brute force attack using a valid username...

CVE-2020-15392

A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...