Smartsoft Smartbpm.net
3 CVEs affecting Smartsoft Smartbpm.net. Latest disclosed: 2023-07-10. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37286 | Critical | 9.8 | 2023-07-10 | SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized paylo… |
CVE-2023-37287 | Critical | 9.1 | 2023-07-10 | SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system wit… |
CVE-2023-37288 | Medium | 6.5 | 2023-07-10 | SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerabili… |