Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Redwood Component: Sap Business Process Automation Clear all filters
TI-2018-01789 CVE-2018-2401 · GHSA-689x-4mp2-jffr

XML external entity injection in SAP Business Process Automation By Redwood

Priority MEDIUM 41

SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01587 Published 2018-03-14 No fix listed CWE-611
TI-2018-01754 CVE-2018-2366 · GHSA-mg6c-9wrm-f57p

Path traversal in SAP Business Process Automation By Redwood

Priority LOW 23

SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are pas…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01512 Published 2018-03-14 No fix listed CWE-22