Approved changes feed: RSS · Atom
cpe:2.3:a:flowring:agentflow:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Flowring (9d18e71f-6dfa-5d0a-93cb-53a72864bf25) |
|---|---|
| Product | Agentflow (7e4f6198-f695-5365-83f7-1d35a9c9e9ee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2099 |
vulnerable | 2026-06-08 07:55:16.529731 |
Flowring｜AgentFlow - Stored Cross-Site Scripting
MEDIUM (5.4)
AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.
Published: 2026-02-10T07:09:51.645Z
Updated: 2026-02-10T15:36:53.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2098 |
vulnerable | 2026-06-08 07:55:16.529376 |
Flowring｜AgentFlow - Reflected Cross-site Scripting
MEDIUM (6.1)
AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Published: 2026-02-10T07:06:27.461Z
Updated: 2026-02-10T15:38:25.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2097 |
vulnerable | 2026-06-08 07:55:16.528962 |
Flowring｜Agentflow - Arbitrary File Upload
HIGH (8.8)
Agentflow developed by Flowring has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2026-02-10T07:02:30.835Z
Updated: 2026-02-10T15:39:41.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2096 |
vulnerable | 2026-06-08 07:55:16.526877 |
Flowring｜Agentflow - Missing Authenticaton
CRITICAL (9.8)
Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality.
Published: 2026-02-10T06:59:35.738Z
Updated: 2026-02-10T19:34:51.774Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2095 |
vulnerable | 2026-06-08 07:55:16.526405 |
Flowring｜Agentflow - Authentication Bypass
CRITICAL (9.8)
Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain arbitrary user authentication token and log into the system as any user.
Published: 2026-02-10T06:53:17.947Z
Updated: 2026-02-10T19:34:22.341Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.