Skip to content
OpenAdvisories

Vendor

Alfresco

2 known vulnerabilities.

Products

Activiti 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-116058

    Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection

    A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the function JuelScriptEngine.eval of the file JuelScriptEngine.java. Performing a manipulation results in code injection. The attack can be initiated remotely. The …

    Alfresco Activiti
  • Medium 6.3
    CVE-2026-3967

    Alfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization

    A flaw has been found in Alfresco Activiti up to 7.19/8.8.0. Affected by this issue is the function deserialize/createObjectInputStream of the file activiti-core/activiti-engine/src/main/java/org/activiti/engine/impl/variable/SerializableType.java of the comp…

    Alfresco Activiti