IBM Filenet p8 Application Engine vulnerabilities

12 CVEs affecting IBM Filenet p8 Application Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-3473, published 2010-09-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-3470, published 2010-09-20. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 and 4.0.2.x before 4.0.2.7-P8AE-FP007 allow…
CVE-2010-3471, published 2010-09-20. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Session fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.7-P8AE-FP007 allows remote attackers to hijack web sessions via…
CVE-2010-3473, published 2010-09-20. Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days. Open redirect vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allows remote attackers to redirect users to arbitrary web sites and…
CVE-2009-4998, published 2010-09-20. Low severity, CVSS 2.6. EPSS: 1.1% chance of exploitation in the next 30 days. The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a…
CVE-2010-3472, published 2010-09-20. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allow remote attackers to inject arbitrary…
CVE-2006-7242, published 2010-09-20. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-001 does not ensure that the AE Administrator role is present for Site Preferences modifications, which…
CVE-2006-7241, published 2010-09-20. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is denied all permissions for an annotation, which might allow…
CVE-2009-5002, published 2010-09-20. Medium severity, CVSS 6.4. EPSS: 1% chance of exploitation in the next 30 days. The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.1-P8AE-FP001 does not record Get Content Failure Audit events, which might allow remote attackers to…
CVE-2009-5001, published 2010-09-20. Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days. The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the…
CVE-2009-5000, published 2010-09-20. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.3-P8AE-FP003 allow remote attackers to inject…

Latest

CVE-2009-4999, published 2010-09-20. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script…
CVE-2008-7261, published 2010-09-20. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local…