⌘ + K

Bottomline

Dashboard / Vendors

Products: 2

Vulnerabilities: 4

Known Exploited: 0

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Vulnerabilities

100806040200

JanFebMarAprMayJunJulAugSepOctNovDec

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Products Security index

Actions

Webseries Payment Application

Application

Transform Foundation Server

Server

Items Per Page

Vulnerabilities

CVE-2014-2577

Multiple cross-site scripting (XSS) vulnerabilities in the Transform Content Center in Bottomline Technologies Transform Foundation Server before 4.3.1 Patch 8 and 5.x before 5.2 Patch 7 allow remote attackers to inject arbitrary web script or HTML via the (1) pn parameter to index.fsp/document.pdf, (2) db or (3) referer parameter to index.fsp/index.fsp, or (4) PATH_INFO to the default URI.

Last Modified: Apr 12, 2025

Published: Jun 05, 2014

CVE-2005-0285

Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs.

Last Modified: Apr 16, 2026

Published: Feb 10, 2005

CVE-2005-0288

The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords.

Last Modified: Apr 16, 2026

Published: Jan 11, 2005

CVE-2005-0287

Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values.

Last Modified: Apr 16, 2026

Published: Jan 10, 2005

Items Per Page