Filtered by vendor Venki
Subscribe
Total
5 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-46479 | 1 Venki | 1 Supravizio Bpm | 2025-10-07 | N/A | 9.9 CRITICAL |
|
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution.
|
|||||
| CVE-2024-46480 | 1 Venki | 1 Supravizio Bpm | 2025-10-03 | N/A | 8.4 HIGH |
|
An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.
|
|||||
| CVE-2024-46481 | 1 Venki | 1 Supravizio Bpm | 2025-10-03 | N/A | 7.2 HIGH |
|
The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.
|
|||||
| CVE-2020-15392 | 1 Venki | 1 Supravizio Bpm | 2024-11-21 | 5.0 MEDIUM | 5.3 MEDIUM |
|
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames.
|
|||||
| CVE-2020-15367 | 1 Venki | 1 Supravizio Bpm | 2024-11-21 | 5.0 MEDIUM | 9.8 CRITICAL |
|
Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.
|
|||||