667 matches found
EUVD-2024-50252
Malicious code in bioql PyPI...
The vulnerability of the Advantive VeraCore cloud-based business process management system lies in its ability to allow unlimited loading of dangerous types of files, enabling attackers to gain unauthorized access to protected information.
The vulnerability of the Advantive VeraCore cloud-based business process management system is related to the unlimited loading of dangerous types of files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2025-45854
/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...
EUVD-2025-16756
/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...
CVE-2025-45854
/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...
CVE-2025-45854
/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...
PT-2025-23631 · Jehc-Bpm · Jehc-Bpm
Name of the Vulnerable Software and Affected Versions: JEHC-BPM version 2.0.1 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file to the "/server/executeExec" API endpoint. This is due to an arbitrary file upload vulnerability in the component...
CVE-2025-45854
/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...
CVE-2025-45854
/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...
JEHC-BPM 安全漏洞
JEHC-BPM is a BPM open source platform for jehc individual developers. A security vulnerability exists in JEHC-BPM v2.0.1, which originates from an arbitrary file upload in the /server/executeExec component and could lead to arbitrary code execution...
CVE-2025-45854
JEHC-BPM contains a Remote Code Execution vulnerability in the /server/executeExec endpoint. The issue affects JEHC-BPM
CVE-2020-15392
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...
CVE-2008-1342
Multiple cross-site scripting XSS vulnerabilities in the search feature in Polymita BPM-Suite and CollagePortal allow remote attackers to inject arbitrary web script or HTML via the 1 q and 2 luceneindexfieldvalue parameters. NOTE: the provenance of this information is unknown; the details are...
CVE-2025-2261 TIBCO BPM Enterprise XSS Vulnerability
Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of the web application...
CVE-2025-2261 TIBCO BPM Enterprise XSS Vulnerability
Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of the web application...
TIBCO Security Advisory: May 13, 2025 - TIBCO BPM Enterprise - CVE-2025-2261
TIBCO BPM Enterprise XSS Vulnerability Original release date: May 13, 2025 Last revised: --- CVE-2025-2261 Source: TIBCO Software Inc. Products Affected TIBCO BPM Enterprise Component Affected TIBCO ActiveMatrix Administrator Description Stored XSS occurs when a web application gathers input from...
CVE-2025-2040
A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack ca...
CVE-2024-46481
The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS...