Bottomline provides payment-processing and financial-transaction software, with its vulnerability footprint concentrated in web-facing applications such as WebSeries Payment Application and Transform Foundation Server. The durable signal centers on web-application input-handling issues, particularly cross-site scripting vulnerabilities, which recur across the vendor's product line.
The number and severity of CVEs published that impact products developed by Bottomline over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-0287MEDIUM Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values. | Jan 10, 2005 | 5.0 | 17 | NO | NO |
The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authentica | Jan 11, 2005 | 3.6 | 16 | NO | NO |
CVE-2005-0285MEDIUM Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs. | May 2, 2005 | 4.6 | 15 | NO | NO |
CVE-2014-2577MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the Transform Content Center in Bottomline Technologies Transform Foundation Server before 4.3.1 Patch 8 and 5.x before 5.2 P | Jun 5, 2014 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bottomline.
Media articles that mention a CVE ID that affects a product developed by Bottomline — matched by CVE ID, not by vendor name.