IBM WebSphere vulnerabilities
6 CVEs affecting IBM WebSphere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1848, published 2018-12-14.
More from IBM.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2015-1884, published 2015-06-28. Medium severity, CVSS 4.0. EPSS: 2.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition…
- CVE-2015-0156, published 2015-05-25. Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x…
- CVE-2018-1848, published 2018-12-14. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the…
- CVE-2015-0193, published 2015-05-30. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x…
- CVE-2016-9693, published 2017-03-07. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a…
- CVE-2017-1756, published 2018-03-30. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.