TI-2024-17456 CVE-2024-26542 · GHSA-mmjv-3699-c2q5
Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14.
Priority MEDIUM 62
Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14.
Vulnerabilities
5 records
TI-2020-18834 CVE-2020-36640 · GHSA-wg99-5vrx-j2gg
XML external entity injection in bonitasoft bonita-connector-webservice
Priority MEDIUM 44
A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0.
TI-2022-08948 CVE-2022-25237 · GHSA-x954-v3m6-xm82
Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due…
Priority HIGH 75
Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter.
TI-2015-03306 CVE-2015-3898 · GHSA-j8pp-wrgj-gr4p
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote…
Priority LOW 36
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1)…
TI-2015-03305 CVE-2015-3897 · GHSA-h3jx-wfwm-w7jp
Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote…
Priority MEDIUM 40
Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a ..