Business Process Management Suite Unauthorized Access

The vulnerability of the Process Analysis & Discovery component in the Business Process Management Suite is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

CVE-2018-3100: Undefined Security Weakness

Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware subcomponent: Process Analysis & Discovery. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows...

PT-2018-1397

Name of the Vulnerable Software and Affected Versions Oracle Business Process Management Suite versions 11.1.1.7.0 through 12.2.1.3.0 Description The issue is related to inadequate access control in the Process Analysis & Discovery component, allowing an unauthenticated attacker with network acce...