Product by Red Hat
Red Hat JBoss BPM Suite
18 known vulnerabilities in Red Hat JBoss BPM Suite (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2015-7501 | Red Hat Data Grid: security vulnerability | 9.8 | |
| Critical | CVE-2018-19361 | FasterXML Jackson-databind: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2018-19362 | FasterXML Jackson-databind: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2018-19360 | FasterXML Jackson-databind: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2016-4999 | Red Hat Dashbuilder: SQL Injection | 9.8 | |
| Medium | CVE-2017-7545 | KIE Jbpm-designer: Improper Restriction of XML External Entity Reference | 6.5 | |
| Medium | CVE-2016-6344 | Red Hat JBoss BPM Suite: security vulnerability | 5.3 | |
| Medium | CVE-2017-7463 | Red Hat Business-central: Cross-site Scripting | 6.1 | |
| High | CVE-2016-7034 | Red Hat JBoss BPM Suite: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2016-6343 | Red Hat JBoss BPM Suite: Cross-site Scripting | 6.1 | |
| Medium | CVE-2016-7033 | Red Hat JBoss BPM Suite: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2017-2674 | Red Hat Business-central: Improper Input Validation | 6.1 | |
| Medium | CVE-2016-8608 | Red Hat BRMS: Cross-site Scripting | 5.4 | |
| High | CVE-2016-5401 | Red Hat JBoss BPM Suite: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2017-2658 | Red Hat BPMS: Improper Input Validation | 2.6 | |
| Not rated | CVE-2015-1818 | Red Hat JBoss BPM Suite: XML External Entity (XXE) | — | |
| Medium | CVE-2016-5398 | Red Hat JBoss BPM Suite: Cross-Site Scripting (XSS) | 5.4 | |
| Not rated | CVE-2013-6468 | Red Hat JBoss BPM Suite: security vulnerability | — |