Total vulnerabilities in the database
IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_application_server | 7.2.0.3 | 7.2.0.3.x |
| ibm / websphere_application_server | 7.2 | 7.2.x |
| ibm / business_process_manager | 8.5.0.0 | 8.5.0.0.x |
| ibm / business_process_manager | 7.5.0.0 | 7.5.0.0.x |
| ibm / business_process_manager | 8.0.1.0 | 8.0.1.0.x |
| ibm / websphere_application_server | 7.2.0.1 | 7.2.0.1.x |
| ibm / business_process_manager | 8.0.1.1 | 8.0.1.1.x |
| ibm / business_process_manager | 8.5.5.0 | 8.5.5.0.x |
| ibm / websphere_application_server | 7.2.0.2 | 7.2.0.2.x |
| ibm / websphere_application_server | 7.2.0.5 | 7.2.0.5.x |
| ibm / business_process_manager | 7.5.1.2 | 7.5.1.2.x |
| ibm / business_process_manager | 7.5.1.1 | 7.5.1.1.x |
| ibm / business_process_manager | 8.5.0.1 | 8.5.0.1.x |
| ibm / business_process_manager | 7.5.1.0 | 7.5.1.0.x |
| ibm / business_process_manager | 8.0.0.0 | 8.0.0.0.x |
| ibm / business_process_manager | 8.0.1.2 | 8.0.1.2.x |
| ibm / business_process_manager | 7.5.0.1 | 7.5.0.1.x |
| ibm / websphere_application_server | 7.2.0.4 | 7.2.0.4.x |