The vulnerability of the BPM platform for comprehensive process automation with ELMA365 allows a hacker to implement HTML payloads without being able to execute the scripts.

The vulnerability of the BPM platform for comprehensive process automation by ELMA365 is related to insufficient filtering and protection measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute HTML payloads without the ability to execute scripts...

The vulnerability of the BPM platform’s module for comprehensive process automation by ELMA365 allows a attacker to perform an SSRF attack.

The vulnerability of the BPM platform for comprehensive process automation in ELMA365 is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...