Vulnerabilities

TI-2014-02361 CVE-2014-2948 · GHSA-r5gv-42g9-8hfg

SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4…

LOW 31

SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01092 Published 2014-05-22 No fix listed CWE-89

TI-2014-02360 CVE-2014-2947 · GHSA-jcf7-fmj5-hfw7

Cross-site scripting (XSS) vulnerability in Login.aspx in Bizagi BPM Suite before 10.3…

LOW 22

Cross-site scripting (XSS) vulnerability in Login.aspx in Bizagi BPM Suite before 10.3 allows remote attackers to inject arbitrary web script or HTML via the txtUsername parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01107 Published 2014-05-22 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4…

Cross-site scripting (XSS) vulnerability in Login.aspx in Bizagi BPM Suite before 10.3…