Skip to main content

Smartbpm Net

3 CVEs product

Monthly

CVE-2023-37288 HIGH This Week

SmartBPM.NET component has a vulnerability of path traversal within its file download function. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Smartbpm Net
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-37287 CRITICAL Act Now

SmartBPM.NET has a vulnerability of using hard-coded authentication key. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Smartbpm Net
NVD
CVSS 3.1
9.1
EPSS
0.9%
CVE-2023-37286 CRITICAL Act Now

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Authentication Bypass Smartbpm Net
NVD
CVSS 3.1
9.8
EPSS
1.0%
EPSS 1% CVSS 7.5
HIGH This Week

SmartBPM.NET component has a vulnerability of path traversal within its file download function. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Smartbpm Net
NVD
EPSS 1% CVSS 9.1
CRITICAL Act Now

SmartBPM.NET has a vulnerability of using hard-coded authentication key. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Smartbpm Net
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Authentication Bypass Smartbpm Net
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy