Vulnerabilities > IBM > Websphere

DATE CVE VULNERABILITY TITLE RISK
2018-12-14 CVE-2018-1848 Cross-site Scripting vulnerability in IBM products
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1
2018-03-30 CVE-2017-1756 Information Exposure vulnerability in IBM Business Process Manager
IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system.
local
low complexity
ibm CWE-200
3.3
2017-03-07 CVE-2016-9693 Improper Input Validation vulnerability in IBM Business Process Manager
IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks.
local
low complexity
ibm CWE-20
6.1