Bonitasoft Bonita Bpm Portal — known CVE vulnerabilities

Every CVE whose affected-product data names Bonitasoft Bonita Bpm Portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-3898 — CVSS 6.1 (medium): Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites…
• CVE-2015-3897 — CVSS 5.0 (medium): Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in…