PT-2016-5344

Name of the Vulnerable Software and Affected Versions IBM FileNet Workplace version 4.0.2 before 4.0.2.14 LA012 Description The issue allows remote authenticated users to read arbitrary files or cause a denial of service due to an XML External Entity XXE issue. This occurs when an XML document...

CVE-2016-3055: Improper Restriction of XML External Entity Reference

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-3047: URL Redirection to Untrusted Site

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2016-5341

Name of the Vulnerable Software and Affected Versions IBM FileNet Workplace versions 4.0.2 through 4.0.2.14 Description The issue allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations For IBM FileNet Workplace versions 4.0.2 throu...

CVE-2016-5981

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-5981

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-5981

CVE-2016-5981 affects IBM FileNet Workplace XT up to 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) up to 4.0.2.14-P8AE-IF001. The IBM Security Bulletin and related sources describe a cross-site scripting (XSS) vulnerability caused by misconfigured RegExpSecurityFilter and ScriptSe...

CVE-2016-5981

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

PT-2016-6746

Name of the Vulnerable Software and Affected Versions IBM FileNet Workplace XT versions 1.1.5.2-WPXT-LA011 and earlier IBM FileNet Workplace Application Engine versions 4.0.2.14-P8AE-IF001 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This occurs when t...

CVE-2016-5981: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

IBM FileNet Workplace XT and FileNet Workplace Cross-Site Scripting Vulnerabilities

IBM FileNet Workplace XT and FileNet Workplace are among the client Web applications that provide access to file management and business process management. A cross-site scripting vulnerability exists in IBM FileNet Workplace XT and FileNet Workplace, which could be exploited by remote attackers ...

IBM FileNet Workplace XML Processing Denial of Service Vulnerability

IBM FileNet is the enterprise content management platform of IBM Corporation of the U.S.A. IBM FileNet Workplace is one of the set of client-side Web applications that provide access to document management and business process management. IBM FileNet Workplace handles XML external entity injectio...

IBM FileNet Workplace Cross-Site Scripting Vulnerability

IBM FileNet Workplace is IBM's out-of-the-box, Web-based application for end users related to enterprise content management. A cross-site scripting vulnerability exists in IBM FileNet Workplace version 4.0.2 that could allow a remote, authenticated user to inject arbitrary web script or HTML via ...

CVE-2016-5878

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-5878

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-3054

Cross-site scripting XSS vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file...

CVE-2016-3054

Cross-site scripting XSS vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file...

Open redirect

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...