<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: ibm-business-process-manager-advanced</title><description>Every new CVE for ibm-business-process-manager-advanced.</description><link>https://agentprime.io/</link><item><title>CVE-2020-4490: IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw.</title><link>https://agentprime.io/advisories/CVE-2020-4490/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-4490/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 May 2020 13:10:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-1494: IBM Business Process Manager 8.5 is vulnerable to cross-site scripting.</title><link>https://agentprime.io/advisories/CVE-2017-1494/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-1494/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 Dec 2017 18:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-1539: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships.</title><link>https://agentprime.io/advisories/CVE-2017-1539/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-1539/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Sep 2017 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-1531: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting.</title><link>https://agentprime.io/advisories/CVE-2017-1531/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-1531/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Sep 2017 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-1530: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting.</title><link>https://agentprime.io/advisories/CVE-2017-1530/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-1530/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Sep 2017 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-1527: IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.</title><link>https://agentprime.io/advisories/CVE-2017-1527/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-1527/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Sep 2017 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-1425: IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting.</title><link>https://agentprime.io/advisories/CVE-2017-1425/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-1425/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Sep 2017 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-1424: IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting.</title><link>https://agentprime.io/advisories/CVE-2017-1424/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-1424/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Sep 2017 16:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-1140: IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting.</title><link>https://agentprime.io/advisories/CVE-2017-1140/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-1140/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Jun 2017 21:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>