Grégory Draperi

#18494of 60,403
16.8Total CVSS
Vulnerabilities · 3
Low
1
Medium
2
PT-2017-5594
2017-12-19
3.5
CVE-2013-6465
Red Hat
Jbpm Kie Workbench
Name of the Vulnerable Software and Affected Versions: JBPM KIE Workbench versions 6.0.x Description: The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs. Recommendations: For JBPM KIE Workbench versions 6.0.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2014-3130
2014-04-10
6.5
CVE-2013-6468
Red Hat
Red Hat Jboss Bpm Suite
The issue allows remote authenticated users to execute arbitrary Java code. This can be achieved via either MVFLEX Expression Language (MVEL) or Drools expressions.
PT-2013-4959
2013-10-04
6.8
CVE-2013-4330
Apache
Apache Camel
The issue allows remote attackers to execute arbitrary simple language expressions. This can be achieved by including `$simple{}` in a CamelFileName message header to a FILE or FTP producer.