Vendors / bonitasoft Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now bonitasoft records in CISA KEV No bonitasoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.56724 · Published 2022-05-27 · No fix listed
Priority MEDIUM 62
Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00527 · Published 2024-02-27 · No fix listed CWE-79
Priority MEDIUM 44
A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00836 · Published 2023-01-05 · Fixed in 1.3.1 CWE-611
Priority MEDIUM 40
Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a ..
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.17562 · Published 2015-06-18 · No fix listed CWE-22
Priority LOW 36
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1)…
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.05837 · Published 2018-02-28 · No fix listed CWE-601
Open these records in search → All records by CVSS severity
2 0 3 0 0
THREATIST.IORead the docs