Ibm Business Process Manager Vulnérabilités

Version

8.0.1	12
8.0.1.1	12
8.0.0	10
8.0.1.0	10
8.5.0	10

Contre-mesures

Official Fix	28
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	54

Exploitabilité

High	2
Functional	0
Proof-of-Concept	0
Unproven	4
Not Defined	76

Vecteur d'accès

Not Defined	0
Physical	0
Local	4
Adjacent	0
Network	78

Authentification

Not Defined	0
High	4
Low	66
None	12

Interaction de l'utilisateur

Not Defined	0
Required	48
None	34

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	20
≤5	38
≤6	12
≤7	10
≤8	2
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	24
≤5	34
≤6	12
≤7	10
≤8	2
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	4
≤4	32
≤5	22
≤6	14
≤7	10
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	2
≤4	2
≤5	4
≤6	22
≤7	8
≤8	0
≤9	6
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	4
≤5	8
≤6	8
≤7	6
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	0
<2k	0
<5k	24
<10k	30
<25k	24
<50k	4
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	28
<2k	10
<5k	28
<10k	16
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (44): 2, 5.0, 5.1, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.5.0.1, 7.5.1, 7.5.1.1, 7.5.1.2, 8, 8.0, 8.0.1, 8.0.1.1, 8.0.1.2, 8.0.1.3, 8.5, 8.5.0.1, 8.5.0.2, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5, 8.5.6, 8.5.6.0 CF2, 8.5.6.1, 8.5.6.2, 8.5.7, 8.6, 18, 18.0.0.1, 18.0.0.2, 19, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.3, 21.0.3.1

Link to Product Website: https://www.ibm.com/

Type de logiciel: Business Process Management Software

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
07/12/2022	5.0	5.0	IBM Business Process Manager Web UI cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-41735
01/06/2022	4.3	4.2	IBM Business Automation Workflow cross site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-22361
19/03/2022	3.8	3.7	IBM Business Automation Workflow chiffrement faible	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-39046
21/12/2021	3.8	3.7	IBM Business Automation Workflow elévation de privilèges	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38900
21/12/2021	4.9	4.9	IBM Business Automation Workflow Web UI cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.07	CVE-2021-38893
17/12/2021	4.8	4.7	IBM Business Automation Workflow Web UI cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38883
06/11/2021	4.8	4.7	IBM Business Automation Workflow or elévation de privilèges	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-29753
30/09/2021	4.9	4.9	IBM Business Automation Workflow Web UI cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-29834
28/06/2021	4.3	4.1	IBM Business Automation Workflow divulgation de l'information	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-29751
21/12/2020	6.3	6.3	IBM Automation Workstream Services elévation de privilèges	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2020-4794