Vulnerabilities > IBM > Business Process Manager > Low

DATE CVE VULNERABILITY TITLE RISK
2018-03-30 CVE-2017-1756 Information Exposure vulnerability in IBM Business Process Manager
IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system.
local
low complexity
ibm CWE-200
3.3
2017-09-25 CVE-2017-1346 Race Condition vulnerability in IBM Business Process Manager
IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user within a short timespan.
local
high complexity
ibm CWE-362
2.5