IBM WebSphere Process Server vulnerabilities

5 CVEs affecting IBM WebSphere Process Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1384, published 2018-03-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6176, published 2014-12-16. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 disregard the SSL…
CVE-2015-7441, published 2016-01-01. Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days. Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6…
CVE-2015-7454, published 2016-03-21. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through…
CVE-2018-1384, published 2018-03-30. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality…
CVE-2009-0507, published 2009-02-26. Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days. IBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration data during an export of the cluster configuration file from the administrative…