CVE-2014-4759

An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM) 8.5.x through 8.5.5 allows remote authenticated users to obtain sensitive information by performing a document-attachment search and then reading document properties in the search results.

• CWE-264

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR50871Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21680809Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94486
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR50871Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21680809Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94486

Published

Sep 4, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4750IBM PowerVC Express Edition 1.2.0 before FixPack3 establishe…
• CVE-2014-4751Cross-site scripting (XSS) vulnerability in IBM Security Acc…
• CVE-2014-4752IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264…
• CVE-2014-4756The Administration and Reporting Tool in IBM Rational Licens…
• CVE-2014-4757The Outlook Extension in IBM Content Collector 4.0.0.x befor…
• CVE-2014-4758IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and W…
• CVE-2014-4760Open redirect vulnerability in IBM WebSphere Portal 6.1.0.0 …
• CVE-2014-4761IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 throu…
• CVE-2014-4762Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2014-4763Cross-site scripting (XSS) vulnerability in Content Navigato…
• CVE-2014-4764IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10…
• CVE-2014-4765IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 thr…