SmartSoft

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

SmartSoft records in CISA KEV

No SmartSoft vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Smartbpm.net · all components

TI-2023-18916 CVE-2023-37286 · GHSA-f7w3-5qrp-w366

MEDIUM 51

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01006 Published 2023-07-10 No fix listed CWE-798

TI-2023-18917 CVE-2023-37287 · GHSA-6h6x-2w77-g8ff

MEDIUM 49

SmartBPM.NET has a vulnerability of using hard-coded authentication key.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00942 Published 2023-07-10 No fix listed CWE-798

TI-2023-18918 CVE-2023-37288 · GHSA-wrv4-vrjr-m5jr

LOW 35

SmartBPM.NET component has a vulnerability of path traversal within its file download function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00936 Published 2023-07-10 No fix listed CWE-23