XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
XXE
Java
Jbpm Designer
NVD
GitHub
CVSS 2.0
7.5
EPSS
2.1%
The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via an. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Cisco
Information Disclosure
Desktop Collaboration Experience Dx650
NVD
CVSS 2.0
7.2
EPSS
0.1%