Skip to content
OpenAdvisories

Product · Data Systems Consulting

BPM

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2022-32457

    Data Systems Consulting Co., Ltd. BPM - Blind Server-Side Request Forgery (SSRF)

    Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.

    Data Systems Consulting BPM