Approved changes feed: RSS · Atom

cpe:2.3:a:next4biz_crm_&_bpm_software:business_process_manangement_(bpm):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNext4Biz Crm & Bpm Software (d7eafaa3-25bd-5516-94d5-6e21ab4a599a)
ProductBusiness Process Manangement (Bpm) (8ea2ef5b-3c70-59e0-82b2-6b3d5cc5d266)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5683 vulnerable 2026-06-08 06:56:17.042650 Remote Code Execution in Next4Biz's BPM
CRITICAL (9.8)
Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Remote Code Inclusion. This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5.
Published: 2024-06-24T08:54:32.424Z
Updated: 2026-06-03T12:55:59.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4754 vulnerable 2026-06-08 06:50:18.564814 Stored XSS in Next4Biz's BPM
MEDIUM (5.4)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Stored XSS. This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5.
Published: 2024-06-24T09:01:13.375Z
Updated: 2026-06-03T13:59:49.342Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.