ProcessMaker 3.0.1.7 Enterprise Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:processmaker:processmaker:3.0.1.7:*:*:*:enterprise:*:*:*

part: a version: 3.0.1.7 update: *

VendorProcessmaker (8767a7f6-f595-578f-9de6-c3243c75ef9a)
ProductProcessmaker (e1aed958-8eda-5d54-89de-5018236b68d2)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/processmaker/processmaker purl2cpe 2026-06-01 10:17:52.202611
pkg:github/processmaker-cloudops/docker purl2cpe 2026-06-01 10:17:52.202612
pkg:github/processmaker/processmaker purl2cpe 2026-06-01 10:17:52.202613
pkg:sourceforge/processmaker purl2cpe 2026-06-01 10:17:52.202615

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9048 vulnerable 2026-06-08 05:08:22.467796 Details available
HIGH (7.4)
Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain setups access the underlying operating system.
Published: 2018-09-10T16:00:00.000Z
Updated: 2024-09-16T22:40:42.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9045 vulnerable 2026-06-08 05:08:22.465552 Details available
HIGH (8.8)
A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.
Published: 2018-09-17T15:00:00.000Z
Updated: 2024-09-16T23:25:25.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.