PT-2022-21331 · Unknown · Digiwin Bpm

Name of the Vulnerable Software and Affected Versions: Digiwin BPM affected versions not specified Description: The issue is related to insufficient validation for user input in a function of Digiwin BPM. This allows an unauthenticated remote attacker to inject arbitrary SQL commands, potentially...

Digiwin BPM SQL注入漏洞

Digiwin BPM is a business process management platform from Taiwan, China-based Digiwin Software Digiwin. A security vulnerability exists in Digiwin BPM version 5.8.6.1 and below, which stems from insufficient authentication of user input for some functions. An unauthenticated, remote attacker can...

Digiwin BPM 代码问题漏洞

Digiwin BPM is a business process management platform from Digiwin Software Taiwan, China. A security vulnerability exists in Digiwin BPM that stems from insufficient validation of user input, which could allow an unauthenticated, remote attacker to gain access to arbitrary system files by...

Digiwin BPM 代码问题漏洞

Digiwin BPM is a business process management platform from Taiwan, China-based Digiwin Software Digiwin. A security vulnerability exists in Digiwin BPM, which stems from insufficient filtering of URL parameters, which could allow an unauthenticated, remote attacker to discover the internal networ...

CVE-2022-32458

Digiwin BPM has a XML External Entity Injection XXE vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files...

CVE-2022-32456

Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service...

CVE-2022-32457

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...

CVE-2022-22361

CVE-2022-22361 affects IBM Cloud Pak for Business Automation and IBM Business Process Manager, where cross-site request forgery (CSRF) could allow an attacker to execute malicious actions on a trusted user’s behalf. Affected versions include IBM Business Automation Workflow traditional (21.0.1–21...

CVE-2022-22773

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Serv...

CVE-2022-22775

The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting XSS vulnerabilities that allow low privileged attackers with network access to execute scripts...

CVE-2022-22775

The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting XSS vulnerabilities that allow low privileged attackers with network access to execute scripts...

Cross site scripting

The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting XSS vulnerabilities that allow low privileged attackers with network access to execute scripts...

CVE-2022-22775 TIBCO ActiveMatrix BPM Reflected Cross Site Scripting (XSS) vulnerability

The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting XSS vulnerabilities that allow low privileged attackers with network access to execute scripts...

CVE-2022-22775

The CVE-2022-22775 entry concerns TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric. Affected component: Workspace client. Vulnerability: Reflected Cross Site Scripting (XSS) that allows low-privilege attackers with network access to execute scripts targeting the ...

CVE-2022-22775

The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting XSS vulnerabilities that allow low privileged attackers with network access to execute scripts...

多款TIBCO Software产品跨站脚本漏洞

TIBCO Software BPM Enterprise and TIBCO Software BPM Enterprise Distribution for TIBCO Silver Fabric are both products of TIBCO Software, Inc.TIBCO Software BPM Enterprise is a business process management platform. The platform enables companies to drive digital transformation by making better...

jeecg-boot suffers from a SQL injection vulnerability (CNVD-2022-43846)

JeecgBoot is a low-code BPM-based platform. jeecg-boot suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information about a database...

TIBCO Security Advisory: May 17, 2022 - TIBCO JasperReports Server -CVE-2022-22773

TIBCO JasperReports Server Reflected Cross Site Scripting XSS vulnerability Original release date: May 17,2022 Last revised: --- CVE-2022-22773 Source: TIBCO Software Inc. Products Affected TIBCO JasperReports Server versions 8.0.1 and below TIBCO JasperReports Server - Community Edition versions...

TIBCO Security Advisory: May 17, 2022 - TIBCO ActiveMatrix BPM -CVE-2022-22775

TIBCO ActiveMatrix BPM Reflected Cross Site Scripting XSS vulnerability Original release date: May 17, 2022 Last revised: --- CVE-2022-22775 Source: TIBCO Software Inc. Products Affected TIBCO BPM Enterprise versions 4.3.1 and below TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric versio...

TIBCO Security Advisory: May 17, 2022 - TIBCO ActiveMatrix BPM -CVE-2022-22775

TIBCO ActiveMatrix BPM Reflected Cross Site Scripting XSS vulnerability Original release date: May 17, 2022 Last revised: --- CVE-2022-22775 Source: TIBCO Software Inc. Products Affected TIBCO BPM Enterprise versions 4.3.1 and below TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric versio...