Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-08	CVE-2018-1885	Information Exposure vulnerability in IBM products IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. network low complexity ibm CWE-200	5.3
2018-03-30	CVE-2018-1384	Cross-site Scripting vulnerability in IBM products IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. network low complexity ibm CWE-79	5.4