Vulnerabilites related to ibm - filenet_p8_business_process_manager
CVE-2013-6746 (GCVE-0-2013-6746)
Vulnerability from cvelistv5
Published
2014-01-22 02:00
Modified
2024-08-06 17:46
Severity ?
CWE
  • n/a
Summary
Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:46:23.396Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "65045",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/65045"
          },
          {
            "name": "ibm-filenet-cve20136746-xss(89862)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89862"
          },
          {
            "name": "56500",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56500"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=swg21662360"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "name": "65045",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/65045"
        },
        {
          "name": "ibm-filenet-cve20136746-xss(89862)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89862"
        },
        {
          "name": "56500",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56500"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=swg21662360"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@us.ibm.com",
          "ID": "CVE-2013-6746",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "65045",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/65045"
            },
            {
              "name": "ibm-filenet-cve20136746-xss(89862)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89862"
            },
            {
              "name": "56500",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56500"
            },
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=swg21662360",
              "refsource": "CONFIRM",
              "url": "http://www.ibm.com/support/docview.wss?uid=swg21662360"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2013-6746",
    "datePublished": "2014-01-22T02:00:00",
    "dateReserved": "2013-11-08T00:00:00",
    "dateUpdated": "2024-08-06T17:46:23.396Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-2518 (GCVE-0-2010-2518)
Vulnerability from cvelistv5
Published
2010-06-30 18:00
Modified
2024-08-07 02:39
Severity ?
CWE
  • n/a
Summary
Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors. NOTE: some of these details are obtained from third party information.
References
http://www.osvdb.org/65804 vdb-entry, x_refsource_OSVDB
http://secunia.com/advisories/40413 third-party-advisory, x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/59792 vdb-entry, x_refsource_XF
http://www.securityfocus.com/bid/41177 vdb-entry, x_refsource_BID
http://www.vupen.com/english/advisories/2010/1616 vdb-entry, x_refsource_VUPEN
http://www-01.ibm.com/support/docview.wss?uid=swg21438487 x_refsource_CONFIRM
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:39:37.070Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "65804",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/65804"
          },
          {
            "name": "40413",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40413"
          },
          {
            "name": "filenet-cse-security-bypass(59792)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59792"
          },
          {
            "name": "41177",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41177"
          },
          {
            "name": "ADV-2010-1616",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1616"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21438487"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors.  NOTE: some of these details are obtained from third party information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "65804",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/65804"
        },
        {
          "name": "40413",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40413"
        },
        {
          "name": "filenet-cse-security-bypass(59792)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59792"
        },
        {
          "name": "41177",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41177"
        },
        {
          "name": "ADV-2010-1616",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1616"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21438487"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-2518",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors.  NOTE: some of these details are obtained from third party information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "65804",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/65804"
            },
            {
              "name": "40413",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40413"
            },
            {
              "name": "filenet-cse-security-bypass(59792)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59792"
            },
            {
              "name": "41177",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41177"
            },
            {
              "name": "ADV-2010-1616",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1616"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21438487",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21438487"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-2518",
    "datePublished": "2010-06-30T18:00:00",
    "dateReserved": "2010-06-30T00:00:00",
    "dateUpdated": "2024-08-07T02:39:37.070Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-1046 (GCVE-0-2011-1046)
Vulnerability from cvelistv5
Published
2011-02-21 17:00
Modified
2024-08-06 22:14
Severity ?
CWE
  • n/a
Summary
IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.
References
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:27.160Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ibm-filenet-contentengine-sec-bypass(65448)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65448"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21462438"
          },
          {
            "name": "46432",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46432"
          },
          {
            "name": "ADV-2011-0423",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0423"
          },
          {
            "name": "43347",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43347"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-02-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ibm-filenet-contentengine-sec-bypass(65448)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65448"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21462438"
        },
        {
          "name": "46432",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46432"
        },
        {
          "name": "ADV-2011-0423",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0423"
        },
        {
          "name": "43347",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43347"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-1046",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ibm-filenet-contentengine-sec-bypass(65448)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65448"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21462438",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21462438"
            },
            {
              "name": "46432",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/46432"
            },
            {
              "name": "ADV-2011-0423",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0423"
            },
            {
              "name": "43347",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/43347"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-1046",
    "datePublished": "2011-02-21T17:00:00",
    "dateReserved": "2011-02-21T00:00:00",
    "dateUpdated": "2024-08-06T22:14:27.160Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd
Published
2014-01-22 05:22
Modified
2025-04-11 00:51
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
psirt@us.ibm.comhttp://secunia.com/advisories/56500
psirt@us.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21662360Vendor Advisory
psirt@us.ibm.comhttp://www.securityfocus.com/bid/65045
psirt@us.ibm.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/89862
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/56500
af854a3a-2127-422b-91ae-364da2661108http://www.ibm.com/support/docview.wss?uid=swg21662360Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/65045
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/89862
Impacted products
Vendor Product Version
ibm filenet_case_foundation 5.2.0
ibm filenet_content_manager 4.5.0
ibm filenet_content_manager 4.5.1
ibm filenet_content_manager 5.0.0
ibm filenet_content_manager 5.1.0
ibm filenet_content_manager 5.2.0
ibm filenet_p8_business_process_manager 4.5.1
ibm filenet_p8_business_process_manager 5.0.0
ibm filenet_p8_business_process_manager 5.1.0


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:filenet_case_foundation:5.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A7073F3-7611-4267-B0E9-630B333EE16B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_content_manager:4.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F852D8F-AFB9-44C7-878D-8A9D6279ACE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_content_manager:4.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "05F86DAF-332E-4CF1-9D7D-99A8AD10B155",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_content_manager:5.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4733131C-1749-48A2-8B6A-60CF990476EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_content_manager:5.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C70F33AB-DC33-464D-8D30-066F3FF00E82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_content_manager:5.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB402686-BDC8-4A38-A395-3759215FD963",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_business_process_manager:4.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6BF4D57-4E31-457A-812E-C2BBC43B9785",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_business_process_manager:5.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "AAF053C6-A526-4C65-AC19-8989B98504FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_business_process_manager:5.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C876167F-0398-4E9E-8186-30523966BDB1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de XSS en FileNet P8 Platform Documentation Installable Info Center 4.5.1 hasta la versi\u00f3n 5.2.0 en IBM FileNet Business Process Manager 4.5.1 hasta 5.1.0, FileNet Content Manager 4.5.1 hasta la versi\u00f3n 5.2.0, y Case Foundation 5.2.0 permite a atacantes remotos inyectar script Web arbitrario o HTML a trav\u00e9s de vectores no especificados."
    }
  ],
  "id": "CVE-2013-6746",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2014-01-22T05:22:15.907",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "url": "http://secunia.com/advisories/56500"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21662360"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "http://www.securityfocus.com/bid/65045"
    },
    {
      "source": "psirt@us.ibm.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89862"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/56500"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21662360"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/65045"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89862"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2010-06-30 18:30
Modified
2025-04-11 00:51
Severity ?
Summary
Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors. NOTE: some of these details are obtained from third party information.
References
cve@mitre.orghttp://secunia.com/advisories/40413Vendor Advisory
cve@mitre.orghttp://www-01.ibm.com/support/docview.wss?uid=swg21438487Vendor Advisory
cve@mitre.orghttp://www.osvdb.org/65804
cve@mitre.orghttp://www.securityfocus.com/bid/41177
cve@mitre.orghttp://www.vupen.com/english/advisories/2010/1616Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/59792
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/40413Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21438487Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/65804
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/41177
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2010/1616Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/59792
Impacted products
Vendor Product Version
ibm p8_content_engine 4.5.1
ibm p8_content_engine 4.5.1.1
ibm p8_content_engine 4.5.1.2
ibm filenet_p8_business_process_manager *
ibm filenet_p8_content_manager *
ibm filenet_p8_business_process_manager *
ibm filenet_p8_content_manager *
ibm p8_content_search_engine 4.5.0
ibm p8_content_search_engine 4.5.0.1
ibm p8_content_search_engine 4.5.0.2
ibm p8_content_search_engine 4.5.1


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:p8_content_engine:4.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6CA98C3-D287-4D9C-B2EF-6FE4DF526DA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:p8_content_engine:4.5.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "97ABEE15-7B9F-4269-8F52-02E8C4B06521",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:p8_content_engine:4.5.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9C3B026-E991-4EBB-812F-0DBB2A8526C9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_business_process_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E13A33FB-D20C-4010-8CE8-249745210F61",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "63637F57-35D7-4B16-8D18-AC958475CD49",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_business_process_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E13A33FB-D20C-4010-8CE8-249745210F61",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "63637F57-35D7-4B16-8D18-AC958475CD49",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:p8_content_search_engine:4.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE2CDBCE-8668-4E74-AC85-7F633805175C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:p8_content_search_engine:4.5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "896B931C-A8D0-4664-99D9-10408CFCF3AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:p8_content_search_engine:4.5.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "243E0A51-D47F-4344-84F7-D2771617D0C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:p8_content_search_engine:4.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "701BD744-1958-47A1-9902-72E5918D6BFB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no espec\u00edfica en el P8 Content Engine (P8CE) v4.5.1 anteriores a FP3 y al P8 Content Search Engine (P8CSE) anteriores a v4.5.0 FP3 y v4.5.1 anterior a FP1, como el usado en IBM FileNet P8 Content Manager (CM) y en FileNet P8 Business Process Manager (BPM), permitiendo a atacantes remotos obtener privilegios mediante vectores desconocidos. NOTA: algunos de estos detalles han sido obtenidos de informaci\u00f3n de terceros."
    }
  ],
  "id": "CVE-2010-2518",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-06-30T18:30:01.910",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/40413"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21438487"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/65804"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/41177"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/1616"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59792"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/40413"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21438487"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/65804"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/41177"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/1616"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59792"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        },
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2011-02-21 18:00
Modified
2025-04-11 00:51
Severity ?
Summary
IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.
References
cve@mitre.orghttp://secunia.com/advisories/43347Vendor Advisory
cve@mitre.orghttp://www-01.ibm.com/support/docview.wss?uid=swg21462438
cve@mitre.orghttp://www.securityfocus.com/bid/46432
cve@mitre.orghttp://www.vupen.com/english/advisories/2011/0423Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/65448
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/43347Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21462438
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/46432
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2011/0423Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/65448
Impacted products
Vendor Product Version
ibm filenet_p8_content_engine 4.0.1
ibm filenet_p8_content_engine 4.0.1.10
ibm filenet_p8_content_engine 4.0.1.11
ibm filenet_p8_content_engine 4.0.1.12
ibm filenet_p8_content_engine 4.0.1.13
ibm filenet_p8_content_engine 4.5.0
ibm filenet_p8_content_engine 4.5.0.2
ibm filenet_p8_content_engine 4.5.1.3
ibm filenet_p8_content_engine 4.5.1.4
ibm filenet_p8_content_engine 4.5.1.5
ibm filenet_p8_content_engine 4.5.1.6
ibm filenet_p8_content_engine 5.0.0
ibm filenet_p8_business_process_manager *
ibm filenet_p8_content_manager *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F200402-0115-4055-8285-F76F7A684A75",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6158EE1-FCAA-471E-94F2-CB45094F2A5F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "77EB1C8B-FEDE-413F-8889-9059027B5B3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2DB5B49-494D-42EA-B723-184B4D4D9491",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B432C59-2B7E-46A6-83FA-A44E055B34A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0068953F-D3EE-4AAF-A156-60232F7E1FDF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "76EDE058-D454-4096-A4A6-514D6B6A1D20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEFB9431-E2DC-4950-9F58-8637A7FCFD62",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9F99A71-F075-40D0-9F5F-DDE4ABBAAB9D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "127D2A94-D74F-4BA8-9CE8-7C893F2DD6BE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "65C8EB6B-4D58-466E-BCFA-D6A085D043BB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_engine:5.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "28997462-17A0-490F-A62E-48098E245B9C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_business_process_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E13A33FB-D20C-4010-8CE8-249745210F61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:filenet_p8_content_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "63637F57-35D7-4B16-8D18-AC958475CD49",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "IBM FileNet P8 Content Engine (tambien conocida como P8CE)v4.0.1 hasta v5.0.0, usada en FileNet P8 Content Manager (CM) yFileNet P8 Business Process Manager (BPM),no requiere el rol de acceso PRIVILEGED_WRITE destinados a modificaciones de objetos de la tienda, que permite a atacantes remotos a cambiar una propiedad privilegiada de un objeto a trav\u00e9s de vectores no especificados"
    }
  ],
  "id": "CVE-2011-1046",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-02-21T18:00:01.567",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43347"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21462438"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/46432"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0423"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65448"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43347"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21462438"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/46432"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0423"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65448"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}