Read the docs

Redwood

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Redwood records in CISA KEV

No Redwood vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sap Business Process Automation 3 records MEDIUM Report2web 2 records LOW Jscape Mft 1 record MEDIUM

Records

3 records in Sap Business Process Automation · all components

TI-2018-01789 CVE-2018-2401 · GHSA-689x-4mp2-jffr

XML external entity injection in SAP Business Process Automation By Redwood

Priority MEDIUM 41

SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01587 Published 2018-03-14 No fix listed CWE-611
TI-2018-01754 CVE-2018-2366 · GHSA-mg6c-9wrm-f57p

Path traversal in SAP Business Process Automation By Redwood

Priority LOW 23

SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are pas…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01512 Published 2018-03-14 No fix listed CWE-22
Open these records in search →