Approved changes feed: RSS · Atom

cpe:2.3:a:bonitasoft:bonita_bpm_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBonitasoft (81b76b97-cc48-5bd9-9416-bf11b2b14ab4)
ProductBonita Bpm Portal (000c3c59-357f-5fa7-8cbd-a2568fc73152)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-3898 vulnerable 2026-06-08 05:06:38.713741 Details available
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1) bonita/login.jsp or (2) bonita/loginservice.
Published: 2018-02-28T21:00:00.000Z
Updated: 2024-08-06T05:56:16.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3897 vulnerable 2026-06-08 05:06:38.713287 Details available
Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme parameter and a file path in the location parameter to bonita/portal/themeResource.
Published: 2015-06-18T18:00:00.000Z
Updated: 2024-08-06T05:56:16.334Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.