CVE-2015-0146

IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended...

CVE-2015-0146

IBM Content Collector for Email (3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001) is affected by an information-disclosure vulnerability due to improper handling of an unspecified query operator when searching IBM FileNet P8 systems via IBM Content Search Servi...

CVE-2015-0146: Undefined Security Weakness

IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended...

CVE-2013-6746

Cross-site scripting XSS vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary w...

Cross site scripting

Cross-site scripting XSS vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary w...

CVE-2013-6746

CVE-2013-6746 is an XSS vulnerability in IBM FileNet P8 Platform Documentation Installable Info Center shipped with IBM FileNet BPM, Content Manager, and Case Foundation. Affected components/versions include FileNet P8 Platform Documentation Installable Info Center 4.5.1–5.2.0, with IBM BPM 4.5.1...

CVE-2013-6746: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary w...

Design/Logic Flaw

Unspecified vulnerability in the Rendition Engine aka P8RE 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager CM allows remote attackers to gain privileges via unknown vectors...

CVE-2011-1046

CVE-2011-1046 : IBM FileNet P8 Content Engine (P8CE) versions 4.0.1–5.0.0 (used in FileNet P8 CM and BPM) do not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, allowing remote attackers to change a privileged property of an object through unspecified vectors...

CVE-2011-1046

IBM FileNet P8 Content Engine aka P8CE 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager CM and FileNet P8 Business Process Manager BPM, does not require the PRIVILEGEDWRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged...

CVE-2011-1045

Unspecified vulnerability in the Rendition Engine aka P8RE 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager CM allows remote attackers to gain privileges via unknown vectors...

CVE-2011-1046: Undefined Security Weakness

IBM FileNet P8 Content Engine aka P8CE 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager CM and FileNet P8 Business Process Manager BPM, does not require the PRIVILEGEDWRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged...

CVE-2011-1045: Undefined Security Weakness

Unspecified vulnerability in the Rendition Engine aka P8RE 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager CM allows remote attackers to gain privileges via unknown vectors...

CVE-2010-3473

Open redirect vulnerability in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-021 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2010-3470

Multiple cross-site scripting XSS vulnerabilities in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-021 and 4.0.2.x before 4.0.2.7-P8AE-FP007 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-5001

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended...

CVE-2010-3472

Multiple cross-site scripting XSS vulnerabilities in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-021 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-5000

Multiple cross-site scripting XSS vulnerabilities in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 4.0.2.x before 4.0.2.3-P8AE-FP003 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to .jsp pages...

CVE-2010-3471

Session fixation vulnerability in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 4.0.2.x before 4.0.2.7-P8AE-FP007 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2009-4998

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass...