[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ft25nxs7O4z-pHCkG03QhFMptda9Fuo3LiTb3cDUXYsw":3,"g5a-ex:redhat\u002Fjboss_bpm_suite@*":140,"g5a-family:redhat\u002Fjboss_bpm_suite":142},{"success":4,"data":5},true,{"product":6,"versions":46,"topVulnerabilitiesByEpss":60,"kevVulnerabilities":117,"seoMetadata":118,"meta":137},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":45},"redhat","jboss_bpm_suite",13,18,0,"2019-01-02",[14,18,21,23,25,27,29,31,34,36,39,41,43],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"6.0.0",5,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"6.0.1",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"6.0.3",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"6.1",{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},"6.1.2",{"version":28,"cve_count":11,"kev_count":11,"has_kev":17},"6.2",{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"6.3",{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"6.3.2",2,{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},"6.4",{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},"6.4.11",3,{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.12",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.2",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"6.4.3","Jboss Bpm Suite by Redhat is a technology product with 13 tracked versions and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[47,48,49,50,51,52,53,54,55,56,57,58,59],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},{"version":28,"cve_count":11,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},[61,69,73,76,79,85,92,100,106,111],{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":68},"CVE-2015-7501","Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift\u002FxPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.","2017-11-09",9.8,"v3.0","Critical",0.85562,{"cveId":70,"description":71,"publishedDate":12,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":72},"CVE-2018-19361","FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.",0.10599,{"cveId":74,"description":75,"publishedDate":12,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":72},"CVE-2018-19360","FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.",{"cveId":77,"description":78,"publishedDate":12,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":72},"CVE-2018-19362","FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.",{"cveId":80,"description":81,"publishedDate":82,"cvssScore":65,"cvssVersion":83,"severity":67,"isKev":17,"epssScore":84},"CVE-2016-4999","SQL injection vulnerability in the getStringParameterSQL method in main\u002Fjava\u002Forg\u002Fdashbuilder\u002Fdataprovider\u002Fsql\u002Fdialect\u002FDefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the (1) Data Set Authoring or (2) Displayer editor UI.","2016-08-05","v3.1",0.03653,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":66,"severity":90,"isKev":17,"epssScore":91},"CVE-2017-7545","It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.","2018-07-26",6.5,"Medium",0.02744,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":97,"severity":98,"isKev":17,"epssScore":99},"CVE-2015-1818","XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document.","2015-08-11",7.5,"v2","High",0.02244,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":66,"severity":90,"isKev":17,"epssScore":105},"CVE-2016-6344","Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.","2016-09-07",5.3,0.02185,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":89,"cvssVersion":97,"severity":90,"isKev":17,"epssScore":110},"CVE-2013-6468","JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression.","2014-04-10",0.02006,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":115,"cvssVersion":66,"severity":90,"isKev":17,"epssScore":116},"CVE-2017-7463","JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML code verbatim without filtering out scripts. Successful exploitation would allow execution of script code within the context of the affected user.","2018-07-27",6.1,0.01818,[],{"title":119,"metaDescription":120,"keywords":121,"structuredData":122},"Jboss Bpm Suite by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jboss Bpm Suite by Redhat covering 13 versions with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jboss Bpm Suite vulnerabilities, Jboss Bpm Suite security, Jboss Bpm Suite CVE, Redhat Jboss Bpm Suite, Jboss Bpm Suite threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":123,"@type":124,"name":125,"description":120,"url":126,"manufacturer":127,"applicationCategory":131,"softwareVersion":132,"mainEntity":133},"https:\u002F\u002Fschema.org","SoftwareApplication","Jboss Bpm Suite","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fjboss_bpm_suite",{"@type":128,"name":129,"url":130},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","13 versions tracked",{"@type":134,"name":135,"description":136,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jboss Bpm Suite Security Vulnerabilities","Security vulnerabilities affecting Jboss Bpm Suite by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":138,"apiVersion":139},"2026-10-17T14:37:14.053Z","3.0",{"rows":141,"total":11,"capped":17,"failed":11},[],[]]