VULNERABILITY INTELLIGENCE

CVE-2014-4844

CVSS score6.5 MEDIUM
EPSS probability1.24%
CISA KEVNot currently listed
Published2014-12-17
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The import/export functionality in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 allows remote authenticated users to bypass intended access restrictions via a project action for a (1) process application or (2) toolkit.

Primary references