Nintex

4 CVEs across 5 Nintex products. Browse Nintex vulnerabilities, severities, and proof-of-concept exploits.

Nintex products with known CVEs

ProductCVEs
Automation3
K2 Blackpearl1
K2 For Sharepoint1
K2 Smartforms1
Workflow1
Nintex CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-27926Medium4.32025-03-10In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by u…
CVE-2025-27925High8.52025-03-10Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.
CVE-2025-27924Medium5.42025-03-10Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action.
CVE-2022-38167Medium6.12022-11-14The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS.
CVE-2015-72992015-10-21SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbit…