TI-2020-12114 CVE-2020-15367 · GHSA-vm87-39vr-v428
Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts.
Priority MEDIUM 46
Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts.
Venki
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Venki records in CISA KEVNo Venki vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-30989 CVE-2024-46479 · GHSA-5r7g-7g7h-rhfj
Unrestricted file upload in Venki Supravizio BPM
Priority MEDIUM 44
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability.
TI-2024-30990 CVE-2024-46480 · GHSA-pjgr-w4jm-qxgm
Insufficiently protected credentials in Venki Supravizio BPM
Priority LOW 39
An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.
TI-2024-30991 CVE-2024-46481 · GHSA-4844-fjxq-2qmw
The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.
Priority LOW 37
The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.
TI-2020-12139 CVE-2020-15392 · GHSA-cmjr-cjxj-859f
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2.
Priority LOW 26
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2.