CVE-2024-4754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Stored XSS. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

CVE-2024-5683

CVE-2024-5683 is an improper control of generation of code vulnerability in Next4Biz BPM software. Multiple connected records confirm the issue affects Next4Biz BPM/CRM with vulnerable versions: 6.6.4.4 prior to 6.6.4.5, indicating a flaw in code generation controls that can lead to remote code e...

PT-2024-32650

Name of the Vulnerable Software and Affected Versions Next4Biz CRM & BPM Software Business Process Management BPM versions 6.6.4.4 through 6.6.4.4 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for...

CVE-2024-4754: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Stored XSS. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

PT-2024-37079

Name of the Vulnerable Software and Affected Versions: Next4Biz CRM & BPM Software Business Process Management BPM versions 6.6.4.4 through 6.6.4.4 Description: The issue is related to improper control of generation of code, also known as 'Code Injection', which allows remote code inclusion. This...

CVE-2024-5683: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...