Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: ProcessMaker Component: Processmaker Clear all filters
TI-2020-10605 CVE-2020-13526 · GHSA-fmx8-rqgc-5vmx

SQL injection in ProcessMaker

Priority MEDIUM 41

SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01703 Published 2020-12-10 No fix listed CWE-89
TI-2020-10604 CVE-2020-13525 · GHSA-cj9c-5245-m5rj

SQL injection in ProcessMaker

Priority MEDIUM 41

The sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL injection in ProcessMaker 3.4.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01703 Published 2020-12-03 No fix listed CWE-89
TI-2016-07408 CVE-2016-9048 · GHSA-72fq-mcfp-rpj7

SQL injection in ProcessMaker Enterprise

Priority LOW 34

Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00798 Published 2018-09-10 No fix listed CWE-89