CVE-2022-32458

🗓️ 20 Jul 2022 02:01:30Reported by twcertType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 60 Views

Digiwin BPM XML External Entity Injection vulnerability, unauthenticated remote attacker can access arbitrary system files

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-32458	11 Jul 202201:27	–	attackerkb
Circl	CVE-2022-32458	20 Jul 202207:41	–	circl
CNNVD	Digiwin BPM 代码问题漏洞	20 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-32458 Data Systems Consulting Co., Ltd. BPM - XML External Entity (XXE) Injection	20 Jul 202202:01	–	cvelist
EUVD	EUVD-2022-35530	3 Oct 202520:07	–	euvd
NVD	CVE-2022-32458	20 Jul 202202:15	–	nvd
OSV	CVE-2022-32458	20 Jul 202202:15	–	osv
Prion	Xxe	20 Jul 202202:15	–	prion
Positive Technologies	PT-2022-21333 · Digiwin · Digiwin Bpm	20 Jul 202200:00	–	ptsecurity

NVD

Vulners

Node

digiwin business_process_managementRange<5.8.8.1

[
  {
    "product": "BPM",
    "vendor": "Data Systems Consulting Co., Ltd.",
    "versions": [
      {
        "lessThanOrEqual": "5.8.6.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]