THREATIST.IORead the docs 5 records
The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.
An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability.
Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts.
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2.