Read the docs

Next4Biz CRM & BPM Software

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Next4Biz CRM & BPM Software records in CISA KEV

No Next4Biz CRM & BPM Software vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-05278 CVE-2024-5683 · GHSA-4mv5-vqcp-r46r

Remote Code Execution in Next4Biz's BPM

Priority MEDIUM 49

Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Remote Code Inclusion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2024-06-24 Fixed in 6.6.4.5 CWE-94
TI-2024-04427 CVE-2024-4754 · GHSA-344q-xw48-jxqf

Stored XSS in Next4Biz's BPM

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0024 Published 2024-06-24 Fixed in 6.6.4.5 CWE-79
Open these records in search →