Show filters
34 Total Results
Displaying 31-34 of 34
Sort by:
Attacker Value
Unknown
CVE-2018-1384
Disclosure Date: March 30, 2018 (last updated November 26, 2024)
IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135.
0
Attacker Value
Unknown
CVE-2017-1765
Disclosure Date: March 30, 2018 (last updated November 26, 2024)
IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150.
0
Attacker Value
Unknown
CVE-2017-1769
Disclosure Date: January 24, 2018 (last updated November 26, 2024)
IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 136783.
0
Attacker Value
Unknown
CVE-2017-1628
Disclosure Date: November 27, 2017 (last updated November 26, 2024)
IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect authorization checks.
0
