Nintex

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Nintex records in CISA KEV

No Nintex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Automation 3 records MEDIUM K2 Blackpearl 1 record LOW K2 For Sharepoint 1 record LOW K2 Smartforms 1 record LOW Workflow 1 record LOW

Records

1 record in K2 Smartforms · all components

TI-2015-06071 CVE-2015-7299 · GHSA-3vm4-857h-6jjc

SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl…

LOW 37

SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02297 Published 2015-10-21 No fix listed CWE-89

Open these records in search →

Critical	1
High	1
Medium	3
Low	0
No CVSS	0