CVE-2016-3055

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-3047

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-3047

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Xxe

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

Open redirect

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-3047

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 is affected by CVE-2016-3055 due to an XML External Entity (XXE) flaw in processing XML data, which could allow remote authenticated users to read arbitrary files or cause a memory-based denial of service. Affected version: FileNet Workplace 4.0.2 (before 4.0.2.14 LA01...

CVE-2016-3047

IBM FileNet Workplace 4.0.2 (up to 4.0.2.14 IF001) is affected by CVE-2016-3047, an Open Redirect vulnerability that could enable phishing by redirecting authenticated users to arbitrary sites via crafted URLs. The remediation provided by IBM is to upgrade to Workplace 4.0.2.14 IF001 and to const...

CVE-2016-3047

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-5981

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-5981

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-5981

CVE-2016-5981 affects IBM FileNet Workplace XT up to 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) up to 4.0.2.14-P8AE-IF001. The IBM Security Bulletin and related sources describe a cross-site scripting (XSS) vulnerability caused by misconfigured RegExpSecurityFilter and ScriptSe...

CVE-2016-5981

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

IBM FileNet Workplace XT and FileNet Workplace Cross-Site Scripting Vulnerabilities

IBM FileNet Workplace XT and FileNet Workplace are among the client Web applications that provide access to file management and business process management. A cross-site scripting vulnerability exists in IBM FileNet Workplace XT and FileNet Workplace, which could be exploited by remote attackers ...

IBM FileNet Workplace XML Processing Denial of Service Vulnerability

IBM FileNet is the enterprise content management platform of IBM Corporation of the U.S.A. IBM FileNet Workplace is one of the set of client-side Web applications that provide access to document management and business process management. IBM FileNet Workplace handles XML external entity injectio...

IBM FileNet Workplace Cross-Site Scripting Vulnerability

IBM FileNet Workplace is IBM's out-of-the-box, Web-based application for end users related to enterprise content management. A cross-site scripting vulnerability exists in IBM FileNet Workplace version 4.0.2 that could allow a remote, authenticated user to inject arbitrary web script or HTML via ...

CVE-2016-5878

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-5878

Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...