Digiwin Business Process Management
3 CVEs affecting Digiwin Business Process Management. Latest disclosed: 2022-07-20. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32456 | Critical | 9.8 | 2022-07-20 | Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delet… |
CVE-2022-32458 | High | 7.5 | 2022-07-20 | Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perfo… |
CVE-2022-32457 | Medium | 5.3 | 2022-07-20 | Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology… |