Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:008:*:*:*:*:*:*

part: a version: 3.5.1 update: 008

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductFilenet P8 Application Engine (cf8c888b-c506-5e8b-9199-d1a2b54a3901)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3473 vulnerable 2026-06-08 04:55:14.810812 Details available
Open redirect vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-16T19:31:31.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3472 vulnerable 2026-06-08 04:55:14.810076 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-17T03:03:42.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3470 vulnerable 2026-06-08 04:55:14.799073 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 and 4.0.2.x before 4.0.2.7-P8AE-FP007 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-17T03:28:50.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4999 vulnerable 2026-06-08 04:51:50.622758 Details available
Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script or HTML via the Name field.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-17T00:35:47.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4998 vulnerable 2026-06-08 04:51:50.613304 Details available
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-16T22:40:08.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7261 vulnerable 2026-06-08 04:51:06.422737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.