EUVD-2019-7218

Malware in sbrugna...

Genius Bytes Genius Server BPM Component Code Injection Vulnerability

Genius Bytes Genius Server is a data platform for connecting IT infrastructure components from Genius Bytes Germany, of which BPM is a business process management component. A security vulnerability exists in the BPM component of Genius Bytes Genius Server Genius CDDS version 3.2.2. A remote...

CVE-2019-16652

The BPM component in Genius Bytes Genius Server Genius CDDS 3.2.2 allows remote authenticated users to execute arbitrary commands...

CVE-2019-16652

The BPM component in Genius Bytes Genius Server Genius CDDS 3.2.2 allows remote authenticated users to execute arbitrary commands...

Command injection

The BPM component in Genius Bytes Genius Server Genius CDDS 3.2.2 allows remote authenticated users to execute arbitrary commands...

CVE-2019-16652

The BPM component in Genius Bytes Genius Server Genius CDDS 3.2.2 allows remote authenticated users to execute arbitrary commands...

PT-2020-9836

Name of the Vulnerable Software and Affected Versions Genius Server Genius CDDS version 3.2.2 Description The issue allows remote authenticated users to execute arbitrary commands via the BPM component. Recommendations For Genius Server Genius CDDS version 3.2.2, consider restricting access to th...

CVE-2010-2370

CVE-2010-2370 affects Oracle Business Process Management within Oracle Fusion Middleware (versions 5.7 MP3, 6.0 MP5, 10.3 MP2). It is exposed over HTTP via the BPM Process Administrator and is listed with CVSS v2 base score 4.3 (Network, Medium complexity, no auth, partial impact to integrity). C...