CVE-2025-66837

A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware...

PT-2026-1864

Name of the Vulnerable Software and Affected Versions ARIS version 10.0.23.0.3587512 Description A file upload issue exists in ARIS version 10.0.23.0.3587512. Attackers can potentially execute arbitrary code by uploading a specially crafted PDF file containing malware. The vulnerability involves...

CVE-2025-66838

The Software AG ARIS business process analysis tool (versions v10.0.23.0.3587512 and before) contains a vulnerability in its file upload API . The root cause is a lack of rate limiting or throttling , which allows an attacker to upload a large volume of files at an unrestricted rate. This behavio...