Bottomline

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bottomline records in CISA KEV

No Bottomline vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webseries Payment Application 3 records LOW Transform Foundation Server 1 record LOW

Records

3 records in Webseries Payment Application · all components

TI-2005-00252 CVE-2005-0287 · GHSA-ghvc-9vm2-6g2c

Bottomline Webseries Payment Application allows remote attackers to read arbitrary files…

LOW 26

Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01388 Published 2005-02-10 No fix listed

TI-2005-00250 CVE-2005-0285 · GHSA-q4fg-7wg4-vhpf

Webseries Payment Application does not properly restrict privileged operations, which…

LOW 24

Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.01431 Published 2005-02-10 No fix listed

TI-2005-00253 CVE-2005-0288 · GHSA-5jw6-5695-7hfj

The change password functionality in Bottomline Webseries Payment Application does not…

LOW 18

The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwor…

CVSS 2.0LOW 3.6 Local No auth Interaction — EPSS 0.00687 Published 2005-02-10 No fix listed

Open these records in search →

Critical	0
High	0
Medium	3
Low	1
No CVSS	0