6643 matches found
Cybozu Office 安全漏洞
Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operational restriction bypass vulnerability exists in the workflow in Cybozu Office. An attacker could exploit the vulnerability to alter workflow data without proper privileges...
Logic Flaw Vulnerability in Galloping Workflow Engine CCBMP Workflow Management System, Process Designer System
Jinan Chidori Information Technology Co., Ltd. specializes in process engine form engine research and development and innovation. A logic flaw vulnerability exists in the workflow engine CCBMP workflow management system and process designer system. An attacker can utilize the vulnerability to...
Security Bulletin: Multiple security vulnerabilities with IBM Content Navigator component in IBM Business Automation Workflow - CVE-2020-4687, CVE-2020-4760, CVE-2020-4704
Summary The embedded IBM Content Navigator, that is shipped with IBM Business Automation Workflow is vulnerable to several security vulnerabilities. Vulnerability Details CVEID: CVE-2020-13956 DESCRIPTION: Apache HttpClient could allow a remote attacker to bypass security restrictions, caused by...
Security Bulletin: Information leakage vulnerability affect IBM Business Automation Workflow - CVE-2021-20358
Summary IBM Business Automation Workflow may leak sensitive information in trace when emitting events for Business Automation Insights. Vulnerability Details CVEID: CVE-2021-20358 DESCRIPTION: IBM Business Automation Insights stores potentially sensitive information in clear text in API connectio...
IBM Engineering Workflow Management Cross-Site Scripting Vulnerability (CNVD-2021-14750)
IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...
PT-2021-3209
Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to a module for creating, editing, and saving scheme types of typical and working business processes, defining business process properties, and creating lists of...
PT-2021-3214
Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to a data exchange module vulnerability in the "ЛОЦМАН WorkFlow" subsystem, which allows for unlimited upload of dangerous file types between different "ЛОЦМАН WorkFlo...
PT-2021-3213
Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN WorkFlow Auditor service of the LOCMAN:PLM system. This could allow an attacker to execute arbitrary code...
PT-2021-3221
Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN WorkFlow and LOCMAN WorkFlow Configurator modules of the LOCMAN:PLM system. Exploitation of this issue...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is Github an open source application. Provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that allows bypassing restrictions tha...
PT-2021-3215
Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the database update module of the WorkFlow system. Exploitation of this issue can allow an attacker to execute...
PT-2021-3204
Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to an unlimited file upload vulnerability in the database update module of the WorkFlow system, which can allow an attacker to execute arbitrary code by replacing the...
IBM Engineering Workflow Management 跨站脚本漏洞
IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...
Argo Code Issues Vulnerabilities
Argo is an open source container native workflow engine. A code issue vulnerability exists in Argo CD versions prior to 1.8.4, which stems from the incorrect handling of Token in the util/session/sessionmanager.go file, resulting in the Token remaining valid after the user is unavailable. No...
Security Bulletin: Multiple CVEs - Vulnerabilities in IBM Java Runtime affect IBM Integration Designer used in IBM Business Automation Workflow and IBM Business Process Manager
Summary Vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM Integration Designer. IBM Integration Designer has addressed the following CVEs. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries compone...
Apache Airflow Access Control Error Vulnerability
Apache Airflow is an Apache project maintained by the open source community dedicated to scheduling and monitoring workflows, open sourced by Airbnb in October 2014 and graduated from the Apache Foundation in January 2019 to become the new Apache top-level project. Failure of proper access contro...
Security Bulletin: OpenSSL vulnerability affects IBM Engineering Workflow Management
Summary OpenSSL has a security vulnerability that allows a remote attacker to exploit the application. OpenSSL is used by Rational BuildForge Agent shipped with IBM Engineering Workflow Management. Rational BuildForge has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-1551...
CVE-2021-23338
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...
