Digiwin Business Process Management — known CVE vulnerabilities

Every CVE whose affected-product data names Digiwin Business Process Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-32456 — CVSS 9.8 (critical): Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to…
• CVE-2022-32458 — CVSS 7.5 (high): Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated…
• CVE-2022-32457 — CVSS 5.3 (medium): Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover…