IBM P8 FileNet P8 Application Engine (P8AE) 4.0.2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:filenet_p8_application_engine:4.0.2:*:*:*:*:*:*:*
part: a version: 4.0.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Filenet P8 Application Engine (cf8c888b-c506-5e8b-9199-d1a2b54a3901) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-3471 |
vulnerable | 2026-06-08 04:55:14.809199 |
Details available
Session fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.7-P8AE-FP007 allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-17T02:37:17.821Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3470 |
vulnerable | 2026-06-08 04:55:14.805949 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 and 4.0.2.x before 4.0.2.7-P8AE-FP007 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-17T03:28:50.283Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5002 |
vulnerable | 2026-06-08 04:51:50.624139 |
Details available
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.1-P8AE-FP001 does not record Get Content Failure Audit events, which might allow remote attackers to attempt content access without detection.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-16T20:01:15.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5001 |
vulnerable | 2026-06-08 04:51:50.623769 |
Details available
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-16T20:07:19.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5000 |
vulnerable | 2026-06-08 04:51:50.623338 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.3-P8AE-FP003 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to .jsp pages.
Published: 2010-09-20T21:00:00.000Z
Updated: 2024-09-16T23:56:26.617Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4998 |
vulnerable | 2026-06-08 04:51:50.619193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.