CVE-2020-1366

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'...

Windows Print Workflow Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the AppContainer sandbox. To exploit this vulnerability, an attack...

PT-2020-22557

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash occurs in the following functions: process ndpi collected info, packe...

PT-2020-22563

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the ndpi workflow process packet function, located in th...

CVE-2020-1366: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'...

PT-2020-3096

Name of the Vulnerable Software and Affected Versions Windows Print Workflow Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that occurs when the Windows Print Workflow Service improperly handles objects in memory. This...

File Upload Vulnerability in TpFlow Workflow Engine

TpFlow workflow engine is a PHP-based development of the workflow engine . A file upload vulnerability exists in TpFlow Workflow Engine, which can be exploited by an attacker to gain control of a web server...

IBM Business Process Manager Access Control

The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software relates to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

IBM Business Process Manager and Business Automation Workflow Cross-Site Scripting Vulnerability

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

CVE-2020-4557

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2020-4557

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

Cross site scripting

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2020-4557

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2020-4557

The CVE-2020-4557 issue affects IBM BPM versions 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0, where cross-site scripting in the Web UI could allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. Remediation documented by IBM ...

CVE-2019-20412

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...

Authentication flaw

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...

CVE-2019-20412

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...

CVE-2020-4557: Improper Neutralization of Input During Web Page Generation

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

PT-2020-10429

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.9 Atlassian Jira Server and Data Center versions 8.0.0 through 8.4.2 Description The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allo...

PT-2020-18130

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow versions 18.0 through 20.0 IBM Business Process Manager versions 8.5 through 8.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...