[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuL9-2yCKkrGv6MNZXxUpvBLIbWYY5j8L22qzqMvtvYA":3,"g5a-ex:ibm\u002Fbusiness_process_manager@*":204,"g5a-family:ibm\u002Fbusiness_process_manager":206},{"success":4,"data":5},true,{"product":6,"versions":88,"topVulnerabilitiesByEpss":116,"kevVulnerabilities":181,"seoMetadata":182,"meta":201},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":87},"ibm","business_process_manager",27,88,0,"2022-05-31",[14,18,21,24,26,28,31,34,36,39,41,44,47,49,52,55,58,61,64,66,69,72,75,77,80,82,85],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.5",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"7.5.0.0",29,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"7.5.0.1",30,{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"7.5.1",{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},"7.5.1.0",{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"7.5.1.1",31,{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"7.5.1.2",28,{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},"8.0",{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},"8.0.0.0",46,{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},"8.0.1",{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},"8.0.1.0",44,{"version":45,"cve_count":46,"kev_count":11,"has_kev":17},"8.0.1.1",45,{"version":48,"cve_count":43,"kev_count":11,"has_kev":17},"8.0.1.2",{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},"8.0.1.3",38,{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},"8.5",2,{"version":56,"cve_count":57,"kev_count":11,"has_kev":17},"8.5.0.0",57,{"version":59,"cve_count":60,"kev_count":11,"has_kev":17},"8.5.0.1",51,{"version":62,"cve_count":63,"kev_count":11,"has_kev":17},"8.5.0.2",20,{"version":65,"cve_count":16,"kev_count":11,"has_kev":17},"8.5.5",{"version":67,"cve_count":68,"kev_count":11,"has_kev":17},"8.5.5.0",60,{"version":70,"cve_count":71,"kev_count":11,"has_kev":17},"8.5.6.0",41,{"version":73,"cve_count":74,"kev_count":11,"has_kev":17},"8.5.6.1",16,{"version":76,"cve_count":63,"kev_count":11,"has_kev":17},"8.5.6.2",{"version":78,"cve_count":79,"kev_count":11,"has_kev":17},"8.5.7.0",37,{"version":81,"cve_count":54,"kev_count":11,"has_kev":17},"8.6",{"version":83,"cve_count":84,"kev_count":11,"has_kev":17},"8.6.0.0",34,{"version":86,"cve_count":11,"kev_count":11,"has_kev":17},"8.6.0.201803","Business Process Manager by Ibm is a technology product with 27 tracked versions and 88 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},{"version":45,"cve_count":46,"kev_count":11,"has_kev":17},{"version":48,"cve_count":43,"kev_count":11,"has_kev":17},{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},{"version":56,"cve_count":57,"kev_count":11,"has_kev":17},{"version":59,"cve_count":60,"kev_count":11,"has_kev":17},{"version":62,"cve_count":63,"kev_count":11,"has_kev":17},{"version":65,"cve_count":16,"kev_count":11,"has_kev":17},{"version":67,"cve_count":68,"kev_count":11,"has_kev":17},{"version":70,"cve_count":71,"kev_count":11,"has_kev":17},{"version":73,"cve_count":74,"kev_count":11,"has_kev":17},{"version":76,"cve_count":63,"kev_count":11,"has_kev":17},{"version":78,"cve_count":79,"kev_count":11,"has_kev":17},{"version":81,"cve_count":54,"kev_count":11,"has_kev":17},{"version":83,"cve_count":84,"kev_count":11,"has_kev":17},{"version":86,"cve_count":11,"kev_count":11,"has_kev":17},[117,125,133,140,145,151,158,164,170,176],{"cveId":118,"description":119,"publishedDate":120,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":17,"epssScore":124},"CVE-2015-1884","Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via a crafted internationalization-file URL.","2015-06-28",4,"v2","Medium",0.02917,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":130,"severity":131,"isKev":17,"epssScore":132},"CVE-2019-4424","IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162770.","2019-08-20",8.2,"v3.1","High",0.02427,{"cveId":134,"description":135,"publishedDate":136,"cvssScore":137,"cvssVersion":122,"severity":138,"isKev":17,"epssScore":139},"CVE-2015-1961","The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via an unspecified API call.","2015-07-13",9,"Critical",0.0241,{"cveId":141,"description":142,"publishedDate":143,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":17,"epssScore":144},"CVE-2014-6182","Directory traversal vulnerability in an export function in the Process Center in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3 and 8.5.x through 8.5.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.","2014-12-17",0.02108,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":122,"severity":123,"isKev":17,"epssScore":150},"CVE-2014-3076","IBM Business Process Manager (BPM) 8.5 through 8.5.5 allows remote attackers to obtain potentially sensitive information by visiting an unspecified JSP diagnostic page.","2014-08-11",5,0.0209,{"cveId":152,"description":153,"publishedDate":154,"cvssScore":155,"cvssVersion":156,"severity":131,"isKev":17,"epssScore":157},"CVE-2017-1527","IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156.","2017-09-26",8.1,"v3.0",0.01968,{"cveId":159,"description":160,"publishedDate":161,"cvssScore":162,"cvssVersion":156,"severity":123,"isKev":17,"epssScore":163},"CVE-2017-1628","IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect authorization checks.","2017-11-27",6.5,0.01834,{"cveId":165,"description":166,"publishedDate":167,"cvssScore":168,"cvssVersion":122,"severity":123,"isKev":17,"epssScore":169},"CVE-2014-6176","IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL setting in the SCA module HTTP import binding and unconditionally select the SSLv3 protocol, which makes it easier for remote attackers to hijack sessions or obtain sensitive information by leveraging the use of a weak cipher.","2014-12-16",4.3,0.01822,{"cveId":171,"description":172,"publishedDate":173,"cvssScore":174,"cvssVersion":156,"severity":123,"isKev":17,"epssScore":175},"CVE-2018-1885","IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.","2019-04-08",5.3,0.01809,{"cveId":177,"description":178,"publishedDate":179,"cvssScore":168,"cvssVersion":122,"severity":123,"isKev":17,"epssScore":180},"CVE-2015-0158","Cross-site scripting (XSS) vulnerability in the Coach NG framework in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.","2015-03-24",0.01742,[],{"title":183,"metaDescription":184,"keywords":185,"structuredData":186},"Business Process Manager by Ibm - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Business Process Manager by Ibm covering 27 versions with 88 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Business Process Manager vulnerabilities, Business Process Manager security, Business Process Manager CVE, Ibm Business Process Manager, Business Process Manager threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":187,"@type":188,"name":189,"description":184,"url":190,"manufacturer":191,"applicationCategory":195,"softwareVersion":196,"mainEntity":197},"https:\u002F\u002Fschema.org","SoftwareApplication","Business Process Manager","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Fbusiness_process_manager",{"@type":192,"name":193,"url":194},"Organization","Ibm","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fibm","Security Software","27 versions tracked",{"@type":198,"name":199,"description":200,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Business Process Manager Security Vulnerabilities","Security vulnerabilities affecting Business Process Manager by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":202,"apiVersion":203},"2026-10-28T15:03:43.696Z","3.0",{"rows":205,"total":11,"capped":17,"failed":11},[],[207],{"product":208,"cves":121},"business_process_manager_enterprise_service_bus"]