Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/12/30 8:16 a.m.2 views

CVE-2025-15227

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS7.2AI score0.00095EPSS
Exploits0References1
OSV
OSV
added 2025/12/29 8:15 a.m.1 views

CVE-2025-15227

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

7.5CVSS6AI score
Exploits0References2
NVD
NVD
added 2025/12/29 8:15 a.m.5 views

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00513EPSS
Exploits0References2
NVD
NVD
added 2025/12/29 8:15 a.m.4 views

CVE-2025-15227

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00095EPSS
Exploits0References2
OSV
OSV
added 2025/12/29 8:15 a.m.0 views

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.4AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/29 7:18 a.m.2 views

CVE-2025-15228 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8.1AI score0.00513EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/29 7:18 a.m.3 views

EUVD-2025-205563

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8AI score0.00513EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/29 7:18 a.m.23 views

CVE-2025-15228 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00513EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/29 7:10 a.m.1 views

CVE-2025-15227 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Read

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS6.9AI score0.00095EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/29 7:10 a.m.3 views

EUVD-2025-205564

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS6.8AI score0.00095EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/29 7:10 a.m.20 views

CVE-2025-15227 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Read

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00095EPSS
Exploits0References2
CVE
CVE
added 2025/12/29 7:10 a.m.6 views

CVE-2025-15227

The CVE concerns BPMFlowWebkit from WELLTEND TECHNOLOGY, with an Arbitrary File Read vulnerability exploitable via Absolute Path Traversal. The description across sources states unauthenticated remote attackers can download arbitrary system files. Documents do not specify affected versions, vulne...

8.7CVSS6.9AI score0.00095EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.1 views

WELLTEND BPMFlowWebkit 安全漏洞

WELLTEND BPMFlowWebkit is a business process management system from Taiwan, China-based WELLTEND. A security vulnerability exists in WELLTEND BPMFlowWebkit, which stems from an arbitrary file read vulnerability that could allow an unauthenticated, remote attacker to traverse and download arbitrar...

8.7CVSS6.8AI score0.00095EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.2 views

PT-2025-53703

Name of the Vulnerable Software and Affected Versions BPMFlowWebkit affected versions not specified Description BPMFlowWebkit developed by WELLTEND TECHNOLOGY has an issue that allows unauthenticated remote attackers to download arbitrary system files by exploiting Absolute Path Traversal. The...

8.7CVSS6.8AI score0.00095EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.3 views

PT-2025-53705

Name of the Vulnerable Software and Affected Versions BPMFlowWebkit affected versions not specified Description BPMFlowWebkit developed by WELLTEND TECHNOLOGY has an arbitrary file upload issue. This allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to...

9.8CVSS8AI score0.00513EPSS
Exploits0References6
Rows per page
Query Builder