Bonitasoft Bonita Bpm Portal
2 CVEs affecting Bonitasoft Bonita Bpm Portal. Latest disclosed: 2018-02-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-3898 | Medium | 6.1 | 2018-02-28 | Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing a… |
CVE-2015-3897 | | 2015-06-18 | Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme parameter a… |