Lucene search
+L

15 matches found

NVD
NVD
•added 2025/12/29 8:15 a.m.•18 views

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00591EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/29 8:15 a.m.•17 views

CVE-2025-15227

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.0054EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/29 8:15 a.m.•13 views

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.4AI score0.00591EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/29 7:18 a.m.•36 views

CVE-2025-15228

BPMFlowWebkit by WELLTEND TECHNOLOGY is affected by an Arbitrary File Upload vulnerability that enables unauthenticated remote attackers to upload and execute a Web Shell backdoor, leading to arbitrary code execution on the server. Affected component is BPMFlowWebkit; root cause is an arbitrary f...

9.8CVSS6.6AI score0.00591EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/29 7:18 a.m.•8 views

CVE-2025-15228 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.6AI score0.00591EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/29 7:18 a.m.•17 views

EUVD-2025-205563

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8AI score0.00591EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/29 7:18 a.m.•46 views

CVE-2025-15228 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00591EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/29 7:10 a.m.•7 views

CVE-2025-15227 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Read

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS6AI score0.0054EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/29 7:10 a.m.•40 views

CVE-2025-15227 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Read

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.0054EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/29 7:10 a.m.•33 views

CVE-2025-15227

The CVE concerns BPMFlowWebkit from WELLTEND TECHNOLOGY, with an Arbitrary File Read vulnerability exploitable via Absolute Path Traversal. The description across sources states unauthenticated remote attackers can download arbitrary system files. Documents do not specify affected versions, vulne...

8.7CVSS6AI score0.0054EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•20 views

WELLTEND BPMFlowWebkit 安全漏洞

WELLTEND BPMFlowWebkit is a business process management system from Taiwan, China-based WELLTEND. A security vulnerability exists in WELLTEND BPMFlowWebkit, which stems from an arbitrary file read vulnerability that could allow an unauthenticated, remote attacker to traverse and download arbitrar...

8.7CVSS6.8AI score0.0054EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•15 views

WELLTEND BPMFlowWebkit 代码问题漏洞

WELLTEND BPMFlowWebkit is a business process management system from WELLTEND Corporation of Taiwan, China. A code issue vulnerability exists in WELLTEND BPMFlowWebkit, which stems from the presence of an arbitrary file upload vulnerability that could allow an unauthenticated, remote attacker to...

9.8CVSS7.8AI score0.00591EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•1 views

CVE-2025-15228: Unrestricted Upload of File with Dangerous Type

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.5AI score0.00591EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•6 views

CVE-2025-15227: Absolute Path Traversal

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS5.9AI score0.0054EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•17 views

PT-2025-53705

Name of the Vulnerable Software and Affected Versions BPMFlowWebkit affected versions not specified Description BPMFlowWebkit developed by WELLTEND TECHNOLOGY has an arbitrary file upload issue. This allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to...

9.8CVSS8AI score0.00591EPSS
SaveExploits0References8
Rows per page
Query Builder