Business Process Manager Security Vulnerabilities and Issues — Business Process Manager CVE List

Lucene search

IbmBusiness Process Manager

2 matches found

CVE•added 2014/08/17 11:55 p.m.•41 views

CVE-2014-3087

callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE)...

4CVSS6.4AI score0.00291EPSS

CVE•added 2014/08/11 10:55 p.m.•37 views

CVE-2014-3076

IBM Business Process Manager (BPM) 8.5 through 8.5.5 allows remote attackers to obtain potentially sensitive information by visiting an unspecified JSP diagnostic page.

5CVSS6.2AI score0.00451EPSS