bonitasoft

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

bonitasoft records in CISA KEV

No bonitasoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bonita Bpm Portal 2 records MEDIUM Bonita Web 2 records HIGH Webservice Connector 1 record MEDIUM

Records

2 records in Bonita Web · all components

TI-2022-08948 CVE-2022-25237 · GHSA-x954-v3m6-xm82

Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due…

HIGH 75

Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.56724 Published 2022-05-27 No fix listed

TI-2024-17456 CVE-2024-26542 · GHSA-mmjv-3699-c2q5

Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14.

MEDIUM 62

Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00527 Published 2024-02-27 No fix listed CWE-79

Open these records in search →

Critical	2
High	0
Medium	3
Low	0
No CVSS	0