# Ibm Business Process Manager


- [CVE-2015-1961](https://insights.sbomify.com/CVE-2015-1961/): Code injection in n/a (critical 9.0)
- [CVE-2017-1769](https://insights.sbomify.com/CVE-2017-1769/): Cross-site request forgery in Business Process Manager (high 8.8)
- [CVE-2017-1539](https://insights.sbomify.com/CVE-2017-1539/): Privilege escalation in Business Process Manager Advanced (high 8.8)
- [CVE-2017-1527](https://insights.sbomify.com/CVE-2017-1527/): XML external entity in Business Process Manager Advanced (high 8.1)
- [CVE-2019-4424](https://insights.sbomify.com/CVE-2019-4424/): XML external entity in Business Automation Workflow (high 7.1)
- [CVE-2015-7441](https://insights.sbomify.com/CVE-2015-7441/): Weak cryptography in n/a (medium 6.8)
- [CVE-2017-1628](https://insights.sbomify.com/CVE-2017-1628/): Missing authorization in Business Process Manager (medium 6.5)
- [CVE-2015-0110](https://insights.sbomify.com/CVE-2015-0110/): Missing authorization in n/a (medium 6.5)
- [CVE-2016-0349](https://insights.sbomify.com/CVE-2016-0349/): Missing authorization in n/a (medium 6.5)
- [CVE-2014-4844](https://insights.sbomify.com/CVE-2014-4844/): Missing authorization in n/a (medium 6.5)
- [CVE-2021-38893](https://insights.sbomify.com/CVE-2021-38893/): Cross-site scripting in Business Process Manager Standard (medium 6.4)
- [CVE-2021-29834](https://insights.sbomify.com/CVE-2021-29834/): Cross-site scripting in Business Automation Workflow (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/business-process-manager/