Lucene search
+L

668 matches found

Positive Technologies
Positive Technologies
added 2019/04/24 12:00 a.m.26 views

PT-2019-19294 · Tibco Software · Tibco Activematrix Policy Director +6

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions prior to 4.2.1 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions prior to 4.2.1 TIBCO ActiveMatrix Policy Director versions prior to 1.1.1 TIBCO ActiveMatrix Service Bus versions prior to 3.3...

8.8CVSS8.6AI score0.00949EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2019/04/24 12:00 a.m.21 views

PT-2019-19298 · Tibco · Tibco Silver Fabric Enabler For Activematrix Bpm +2

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO Silver Fabric Enabler for ActiveMatrix BPM versions up to and including 1.4.1...

6.1CVSS4.9AI score0.01137EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2019/04/24 12:00 a.m.16 views

PT-2019-19296 · Tibco · Tibco Silver Fabric Activematrix Service Grid Distribution +7

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO ActiveMatrix Policy Director versions up to and including 1.1.0 TIBCO ActiveMatrix...

9.8CVSS8.6AI score0.02531EPSS
SaveExploits0References4
OSV
OSV
added 2019/04/23 7:32 p.m.14 views

CVE-2019-2706

Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware subcomponent: BPM Foundation Services. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

8.2CVSS7.3AI score0.02014EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2019/04/23 6:16 p.m.18 views

CVE-2019-2706

Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware subcomponent: BPM Foundation Services. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

7.2AI score0.02014EPSS
SaveExploits0References2
CVE
CVE
added 2019/04/23 6:16 p.m.58 views

CVE-2019-2706

CVE-2019-2706 affects Oracle Fusion Middleware’s Business Process Management Suite (BPM) , specifically the subcomponent BPM Foundation Services (v 11.1.1.9.0). The vulnerability allows an unauthenticated attacker who can reach the BPM over HTTP to compromise the BPM Suite; attacks require human ...

8.2CVSS8.2AI score0.02014EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/04/23 6:16 p.m.28 views

CVE-2019-2706

Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware subcomponent: BPM Foundation Services. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

8.3AI score0.02014EPSS
SaveExploits0References2
Tibco
Tibco
added 2019/04/22 5:59 p.m.22 views

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-11203

TIBCO BPM Enterprise Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities Original release date: April24, 2019 Last revised: CVE-2019-11203 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities Original release date:...

4.3CVSS6.4AI score0.00686EPSS
SaveExploits0Affected Software3
Tibco
Tibco
added 2019/04/22 5:59 p.m.24 views

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-11203

TIBCO BPM Enterprise Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities Original release date: April24, 2019 Last revised: CVE-2019-11203 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities Original release date:...

8.8CVSS7.2AI score0.00686EPSS
SaveExploits0Affected Software3
Tibco
Tibco
added 2019/04/22 5:34 p.m.19 views

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-8995

TIBCO BPM Enterprise Open Redirect Vulnerability Original release date: April 24,2019 Last revised: CVE-2019-8995 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Open Redirect Vulnerability Original release date: April 24, 2019 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBC...

6.1CVSS5.5AI score0.01137EPSS
SaveExploits0Affected Software3
Tibco
Tibco
added 2019/04/22 4:48 p.m.25 views

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-8994

TIBCO BPM Enterprise Escalation of Privileges Vulnerability Original release date:April 24, 2019 Last revised: CVE-2019-8994 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability Original release date: April 24, 2019 Last revised: -- Source: TIBCO Software Inc...

5.4CVSS5.1AI score0.00782EPSS
SaveExploits0Affected Software3
Tibco
Tibco
added 2019/04/22 4:48 p.m.21 views

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-8994

TIBCO BPM Enterprise Escalation of Privileges Vulnerability Original release date:April 24, 2019 Last revised: CVE-2019-8994 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability Original release date: April 24, 2019 Last revised: -- Source: TIBCO Software Inc...

4.9CVSS6.7AI score0.00782EPSS
SaveExploits0Affected Software3
Prion
Prion
added 2019/04/08 3:29 p.m.22 views

Information disclosure

IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241...

4CVSS4.3AI score0.00873EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/04/08 2:50 p.m.34 views

CVE-2019-4045

IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241...

4.3CVSS4.4AI score0.00873EPSS
SaveExploits0References2
CVE
CVE
added 2019/04/08 2:50 p.m.74 views

CVE-2019-4045

IBM CVE-2019-4045 affects IBM Business Automation Workflow and IBM Business Process Manager, specifically versions 18.0.0.0–18.0.0.2 (and various BPM CF/iFix ranges). The root cause is a missing restriction in an API that allows a client to spoof the last-modified-by value of a document within th...

4.3CVSS4.4AI score0.00873EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2019/03/07 10:29 p.m.8 views

CVE-2018-18808

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

7.5CVSS5.7AI score
SaveExploits0References3
OSV
OSV
added 2019/03/07 10:29 p.m.10 views

CVE-2019-8986

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

7.7CVSS7AI score0.01039EPSS
SaveExploits0References2
Prion
Prion
added 2019/03/07 10:29 p.m.23 views

Design/Logic Flaw

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

4CVSS7.4AI score0.01039EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2019/03/07 10:29 p.m.25 views

Race condition

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

8.5CVSS7.7AI score0.01705EPSS
SaveExploits0References3Affected Software3
Prion
Prion
added 2019/03/07 10:29 p.m.19 views

Directory traversal

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

4CVSS6.4AI score0.79064EPSS
SaveExploits4References7Affected Software4
Rows per page
Query Builder