The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software lies in access control errors, which allow attackers to gain access to protected information.

The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software relates to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

IBM Business Process Manager and Business Automation Workflow Cross-Site Scripting Vulnerability

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

CVE-2020-4557

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2020-4557

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

Cross site scripting

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2020-4557

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2020-4557

The CVE-2020-4557 issue affects IBM BPM versions 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0, where cross-site scripting in the Web UI could allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. Remediation documented by IBM ...

CVE-2019-20412

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...

Authentication flaw

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...

CVE-2019-20412

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...

CVE-2020-4557: Improper Neutralization of Input During Web Page Generation

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

IBM Business Process Manager and IBM Business Automation Workflow Information Disclosure Vulnerability

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

CVE-2020-4532

IBM Business Automation Workflow and IBM Business Process Manager IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...

CVE-2020-4532

IBM Business Automation Workflow and IBM Business Process Manager IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...

Information disclosure

IBM Business Automation Workflow and IBM Business Process Manager IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...

CVE-2020-4532

IBM Business Automation Workflow and IBM Business Process Manager IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...

CVE-2020-4532

CVE-2020-4532 affects IBM Business Automation Workflow and IBM Business Process Manager. Affected: IBM BPM/Business Automation Workflow (IBM BPM Express 8.5.5, 8.5.6, 8.5.7, and 8.6; BPM 8.6; and related 18.0.0.1/19.0.0.3 lines per bulletin). Description: remote attacker can obtain sensitive info...

CVE-2020-4532: Generation of Error Message Containing Sensitive Information

IBM Business Automation Workflow and IBM Business Process Manager IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...

DEBIAN-CVE-2018-16848

A Denial of Service DoS condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service...

UBUNTU-CVE-2018-16848

A Denial of Service DoS condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service...