CVE-2016-8921

CVE-2016-8921 concerns IBM FileNet Workplace XT (v1.1.5) where a remote attacker can upload arbitrary files due to a file extension validation bypass. The IBM Security Bulletin details that the vulnerability enables uploading malicious content to the FileNet P8 server, potentially leading to code...

CVE-2016-8921: Unrestricted Upload of File with Dangerous Type

IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

PT-2017-9868

Name of the Vulnerable Software and Affected Versions IBM FileNet WorkPlace XT affected versions not specified Description The issue allows a remote attacker to upload arbitrary files, potentially enabling the execution of arbitrary code on the vulnerable server. Recommendations At the moment,...

IBM FileNet Workplace XT Arbitrary File Upload Vulnerability

IBM FileNet is a suite of enterprise content management platforms from IBM in the U.S. IBM FileNet Workplace XT is one of the client Web applications that provides access to document management and business process management. An arbitrary file upload vulnerability exists in IBM FileNet Workplace...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-3047

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-3047

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Xxe

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-3047

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Open redirect

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 is affected by CVE-2016-3055 due to an XML External Entity (XXE) flaw in processing XML data, which could allow remote authenticated users to read arbitrary files or cause a memory-based denial of service. Affected version: FileNet Workplace 4.0.2 (before 4.0.2.14 LA01...

CVE-2016-3047

IBM FileNet Workplace 4.0.2 (up to 4.0.2.14 IF001) is affected by CVE-2016-3047, an Open Redirect vulnerability that could enable phishing by redirecting authenticated users to arbitrary sites via crafted URLs. The remediation provided by IBM is to upgrade to Workplace 4.0.2.14 IF001 and to const...

CVE-2016-3047

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-3047: URL Redirection to Untrusted Site

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2016-5344

Name of the Vulnerable Software and Affected Versions IBM FileNet Workplace version 4.0.2 before 4.0.2.14 LA012 Description The issue allows remote authenticated users to read arbitrary files or cause a denial of service due to an XML External Entity XXE issue. This occurs when an XML document...

PT-2016-5341

Name of the Vulnerable Software and Affected Versions IBM FileNet Workplace versions 4.0.2 through 4.0.2.14 Description The issue allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations For IBM FileNet Workplace versions 4.0.2 throu...

CVE-2016-3055: Improper Restriction of XML External Entity Reference

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-5981

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...