Vulnerabilities

TI-2026-32446 CVE-2026-44516 · GHSA-3jh5-rr2q-xfv7

Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer

LOW 33

Valtimo is an open-source business process automation platform.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.002 Published 2026-05-14 Fixed in 12.33.0, 13.26.0 CWE-532

TI-2026-30835 CVE-2026-42555 · GHSA-j7j9-5253-f7vh

MEDIUM 42

Valtimo is an open-source business process automation platform.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00576 Published 2026-05-14 Fixed in 13.23.0, 12.32.0 CWE-94

TI-2026-26464 CVE-2026-34164 · GHSA-hfrg-mcvw-8mch

LOW 23

Valtimo is an open-source business process automation platform.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00366 Published 2026-04-16 Fixed in 13.22.0.RELEASE CWE-532

TI-2025-35902 CVE-2025-58059 · GHSA-w48j-pp7j-fj55

MEDIUM 41

Valtimo is a platform for Business Process Automation.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00405 Published 2025-08-28 Fixed in 12.16.0.RELEASE, 13.1.2.RELEASE CWE-200

TI-2025-31031 CVE-2025-48881 · GHSA-965r-9cg9-g42p

LOW 38

Valtimo is a platform for Business Process Automation.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00346 Published 2025-05-30 Fixed in 12.13.0.RELEASE CWE-863

TI-2024-23003 CVE-2024-34706 · GHSA-xcp4-62vj-cq3r

MEDIUM 51

Valtimo is an open source business process and case management platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01057 Published 2024-05-13 Fixed in 10.8.4, 11.1.6 +1 CWE-532