Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Welltend Component: Bpmflowwebkit Clear all filters
TI-2025-13905 CVE-2025-15228 · GHSA-wgvp-jwxw-3rhx

WELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File Upload

Priority MEDIUM 49

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00591 Published 2025-12-29 Fixed in 5.0.5 CWE-434
TI-2025-13904 CVE-2025-15227 · GHSA-29c2-7qg3-7c74

WELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File Read

Priority MEDIUM 44

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00536 Published 2025-12-29 Fixed in 5.0.5 CWE-36