Skip to content
OpenAdvisories

Vendor

Eptura

3 known vulnerabilities.

Products

Archibus 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-107187

    Eptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive Tables

    A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. D…

    Eptura Archibus
  • High 8.6
    CVE-2026-107186

    Eptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse

    An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication.

    Eptura Archibus