CVE-2021-20306
Published Jun 1, 2021A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user…
Vendor/product archive
redhat / jbpm CVEs
Beta · best-effort4 CVEs tagged to redhat / jbpm — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2017-7545
Published Jul 26, 2018It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to…
CVE-2013-6465
Published Dec 19, 2017Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task…
CVE-2014-8125
Published Apr 21, 2015XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPM…
Showing 1-4 of 4 CVEsPage 1 of 1