# IBM Business Process Manager Advanced.

Every CVE that names IBM Business Process Manager Advanced among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw.](https://agentprime.io/advisories/CVE-2020-4490.md)
  `CVE-2020-4490` · CVE record: IBM Business Process Manager Advanced and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2020
- [IBM Business Process Manager 8.5 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1494.md)
  `CVE-2017-1494` · CVE record: IBM Business Process Manager Advanced · No CVSS score · Not analysed yet · Published 20 Dec 2017
- [IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships.](https://agentprime.io/advisories/CVE-2017-1539.md)
  `CVE-2017-1539` · CVE record: IBM Business Process Manager Advanced · No CVSS score · Not analysed yet · Published 26 Sept 2017
- [IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1531.md)
  `CVE-2017-1531` · CVE record: IBM Business Process Manager Advanced · No CVSS score · Not analysed yet · Published 26 Sept 2017
- [IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1530.md)
  `CVE-2017-1530` · CVE record: IBM Business Process Manager Advanced · No CVSS score · Not analysed yet · Published 26 Sept 2017
- [IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.](https://agentprime.io/advisories/CVE-2017-1527.md)
  `CVE-2017-1527` · CVE record: IBM Business Process Manager Advanced · No CVSS score · Not analysed yet · Published 26 Sept 2017
- [IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1425.md)
  `CVE-2017-1425` · CVE record: IBM Business Process Manager Advanced · No CVSS score · Not analysed yet · Published 26 Sept 2017
- [IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1424.md)
  `CVE-2017-1424` · CVE record: IBM Business Process Manager Advanced · No CVSS score · Not analysed yet · Published 25 Sept 2017
- [IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1140.md)
  `CVE-2017-1140` · CVE record: IBM Business Process Manager Advanced · No CVSS score · Not analysed yet · Published 8 Jun 2017

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-business-process-manager-advanced>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-business-process-manager-advanced/>. Everything for agents: <https://agentprime.io/llms.txt>.