Skip to content
OpenAdvisories

Product · Data Systems Consulting

BPM

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Data Systems Consulting Co., Ltd. BPM - SQL Injection

    Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service.