Security Bulletin: Cross Site Scripting vulnerabilities in jQuery might affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-7656, CVE-2020-11022, CVE-2020-11023

Summary Cross Site Scripting vulnerabilities in jQuery might affect Process Portal in IBM Business Automation Workflow and IBM Business Process Manager BPM. Vulnerability Details CVEID: CVE-2020-7656 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of...

Security Bulletin: Information disclosure vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2022-0155, CVE-2022-0536, CVE-2021-3749

Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to an information disclosure attack. Vulnerability Details CVEID: CVE-2021-3749 DESCRIPTION: axios is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the trim...

nuclei-templates

This repository is a collection of community-curated templates for the nuclei engine to find security vulnerabilities in applications. The templates are stored in the cves/ directory and are used by the nuclei scanner to identify potential vulnerabilities. The repository also contains workflows f...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.13) +4 more potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.13)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1-beta-1) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.14.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

com.testinium.jenkins:testinium (1.0), io.jenkins.blueocean:blueocean (>=1.0.0-b15, <=1.2.0-beta-1) +25 more potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.0, <=2.17)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version =2.0, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2, =1.0.0-rc2, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2, =2.2.0, =2.0, =2.0.5, =1.0, =1.5, =1.0.0, =2.0.5 and more Source cves: CVE-2022-29047 Source advisory: GHSA-HH6F-6FP5-GFPV...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.7-alpha-1) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.7-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.7) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.7)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.8) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.8)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.9) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.9)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10-beta-1) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.10-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-1) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-3) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-3)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-6) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-6)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 0.1-beta-6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.0-beta-1) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.0-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.1) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4.3)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregat...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.5), org.jvnet.hudson.plugins:analysis-test (>=1.18, <=1.19) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.5)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator...