Read the docs

Welltend

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Welltend records in CISA KEV

No Welltend vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bpmflowwebkit 2 records MEDIUM

Records

2 records in Bpmflowwebkit · all components

TI-2025-13905 CVE-2025-15228 · GHSA-wgvp-jwxw-3rhx

WELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File Upload

Priority MEDIUM 49

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00591 Published 2025-12-29 Fixed in 5.0.5 CWE-434
TI-2025-13904 CVE-2025-15227 · GHSA-29c2-7qg3-7c74

WELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File Read

Priority MEDIUM 44

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00536 Published 2025-12-29 Fixed in 5.0.5 CWE-36
Open these records in search →