CVE-2014-3076

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-11 · updated 2026-06-17
Weakness: CWE-200

Description

IBM Business Process Manager (BPM) 8.5 through 8.5.5 allows remote attackers to obtain potentially sensitive information by visiting an unspecified JSP diagnostic page.

Affected products

IBM Business Process Manager: 8.5.0.0, 8.5.0.1, 8.5.5.0

References

http://secunia.com/advisories/60614
http://www-01.ibm.com/support/docview.wss?uid=swg1JR50760
http://www-01.ibm.com/support/docview.wss?uid=swg21679976
http://www.securitytracker.com/id/1030666
https://exchange.xforce.ibmcloud.com/vulnerabilities/93822
http://secunia.com/advisories/60614
http://www-01.ibm.com/support/docview.wss?uid=swg1JR50760
http://www-01.ibm.com/support/docview.wss?uid=swg21679976
http://www.securitytracker.com/id/1030666
https://exchange.xforce.ibmcloud.com/vulnerabilities/93822

Get alerted when CVE-2014-3076 or the next vulnerability affects your stack