Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:express:*:*:*

part: a version: 8.5.6.0 update: cf2

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBusiness Process Manager (c04880ff-cbea-5a09-933e-d292be30c643)
Edition*
Language*
Software editionexpress
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1674 vulnerable 2026-06-08 05:11:18.586391 Details available
MEDIUM (6.3)
IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109.
Published: 2018-09-20T15:00:00.000Z
Updated: 2024-09-16T16:13:57.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1766 vulnerable 2026-06-08 05:09:23.028837 Details available
MEDIUM (4.3)
Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.
Published: 2018-03-30T16:00:00.000Z
Updated: 2024-09-16T22:31:13.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1765 vulnerable 2026-06-08 05:09:23.027572 Details available
LOW (3.1)
IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150.
Published: 2018-03-30T16:00:00.000Z
Updated: 2024-09-17T03:19:06.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1756 vulnerable 2026-06-08 05:09:22.999990 Details available
MEDIUM (4)
IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
Published: 2018-03-30T16:00:00.000Z
Updated: 2024-09-17T01:31:39.318Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.