CVE-2025-66837

A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware...

CVE-2025-66838

The ARIS business process analysis tool by Software AG is vulnerable to a resource exhaustion flaw in versions 10.0.23.0.3587512 and before . The File Upload API fails to enforce rate limiting or throttling , allowing an attacker to upload a large volume of files at an unrestricted rate. This can...

PT-2026-1864

Name of the Vulnerable Software and Affected Versions ARIS version 10.0.23.0.3587512 Description A file upload issue exists in ARIS version 10.0.23.0.3587512. Attackers can potentially execute arbitrary code by uploading a specially crafted PDF file containing malware. The vulnerability involves...