Known vulnerabilities in IBM Business Process Manager - page 2

Vendor: IBM Corporation
Software: IBM Business Process Manager
Software CPE: cpe:2.3:a:ibm_corporation:ibm_business_process_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 33
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Business Process Manager IBM Business Process Manager is affected by 33 known vulnerabilities: 1 critical, 6 high, 14 medium, 12 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109016 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4516		 CWE-79 Low
No
No
 - 13.05.2025 SB20200908101
SB2025051321
#VU109014 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4698		 CWE-79 Low
No
No
 - 13.05.2025 SB20200908100
SB2025051321
#VU109013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4557		 CWE-79 Low
No
No
 - 13.05.2025 SB2020062928
SB2025051321
#VU59550 - Improper Certificate Validation
CVE-2021-44533		 CWE-295 Medium
No
No
 - 12.01.2022 SB2022011216
SB2022041522
SB2022042517
and 36 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU14916 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-1674		 CWE-89 Medium
No
No
 - 27.09.2018 SB2018092704
#VU12164 - Incorrect Authorization
CVE-2017-1766		 CWE-863 Low
No
No
 - 25.04.2018 SB2018042518
#VU11620 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1765		 CWE-200 Low
No
No
 - 08.04.2018 SB2018032404
SB2024072620
#VU11619 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1384		 CWE-79 Low
No
No
 - 08.04.2018 SB2018032404
SB2024072620
#VU11618 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1767		 CWE-79 Low
No
No
 - 04.04.2018 SB2018032404
SB2024072620
#VU10432 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1494		 CWE-79 Low
No
No
 - 08.02.2018 SB2018020906
#VU10343 - Cross-Site Request Forgery (CSRF)
CVE-2017-1769		 CWE-352 Low
No
No
 - 30.01.2018 SB2018020109
#VU9339 - Improper Access Control
CVE-2017-1628		 CWE-284 Low
No
No
 - 15.11.2017 SB2017111507


Showing elements 21 - 40 out of 33