CVE-2014-3076: IBM Business Process Manager

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

IBM Business Process Manager (BPM) 8.5 through 8.5.5 allows remote attackers to obtain potentially sensitive information by visiting an unspecified JSP diagnostic page.

Affected products

• IBM Business Process Manager: version 8.5.0.0 only; version 8.5.0.1 only; version 8.5.5.0 only

Published 2014-08-11. Last modified 2026-06-17.