Approved changes feed: RSS · Atom

cpe:2.3:a:venki:supravizio_bpm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVenki (218b204f-7598-5ec3-9e47-23541599f29a)
ProductSupravizio Bpm (42290247-701d-50d0-914f-16a9a64e6c2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-46481 vulnerable 2026-06-08 06:48:10.105916 Details available
HIGH (7.2)
The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.
Published: 2025-01-13T00:00:00.000Z
Updated: 2025-01-13T20:19:10.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46480 vulnerable 2026-06-08 06:48:10.105608 Details available
HIGH (8.4)
An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.
Published: 2025-01-13T00:00:00.000Z
Updated: 2025-01-13T20:18:27.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46479 vulnerable 2026-06-08 06:48:10.105275 Details available
CRITICAL (9.9)
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution.
Published: 2025-01-13T00:00:00.000Z
Updated: 2025-01-13T21:01:58.000Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.