IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Content Management (ECM) integration is. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.
Privilege Escalation
IBM
Business Process Manager
NVD
CVSS 2.0
3.5
EPSS
0.1%
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local. Rated low severity (CVSS 1.7), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Intouch
Web Studio
Schneider Electric
Indusoft
+1
NVD
CVSS 2.0
1.7
EPSS
0.1%