AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-4844

MEDIUM · CVSS 6.5 EPSS 1.24%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-12-17 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.

CVE
CVE-2014-4844
Severity
MEDIUM
CVSS
6.5
EPSS
1.24%

Original NVD Description

The import/export functionality in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 allows remote authenticated users to bypass intended access restrictions via a project action for a (1) process application or (2) toolkit.