Business Process Manager@8.6 Security Vulnerabilities and Issues — Business Process Manager@8.6 CVE List

Lucene search

IbmBusiness Process Manager8.6

4 matches found

cve•added 2021/12/17 5:15 p.m.•46 views

CVE-2021-38883

IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...

5.4CVSS5.2AI score0.00215EPSS

cve•added 2021/11/05 6:15 p.m.•42 views

CVE-2021-29753

IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

5.9CVSS6AI score0.0007EPSS

cve•added 2021/06/28 4:15 p.m.•37 views

CVE-2021-29751

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.

4.3CVSS4.4AI score0.00225EPSS

cve•added 2021/09/29 4:15 p.m.•35 views

CVE-2021-29834

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu...

6.4CVSS5.1AI score0.00105EPSS