Bonitasoft vulnerabilities

Products

• Bonita Web 3
• Bonita Bpm Portal 2

Newest

• bonitasoft bonita web Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability CVE-2024-28087 Fix available 6.5 MediumMay 15, 2024
• bonitasoft bonita web Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7... CVE-2024-26542 6.1 MediumFebruary 27, 2024
• bonitasoft bonita-connector-webservice, webservice connector +1 more bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference CVE-2020-36640 Fix available 5.5 MediumJanuary 5, 2023
• bonitasoft bonita web Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an... CVE-2022-25237 EPSS 56.7% 9.8 CriticalMay 27, 2022
• bonitasoft bonita bpm portal Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers... CVE-2015-3898 Public exploit 6.1 MediumFebruary 28, 2018
• bonitasoft bonita bpm portal Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to... CVE-2015-3897 Public exploit EPSS 17.6% 5.0 MediumJune 18, 2015