Skip to content
OpenAdvisories

Product · Flowring

Agentflow BPM

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2022-39038

    FLOWRING Agentflow BPM - Broken Access Control

    Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service.

    Flowring Agentflow BPM
  • High 7.5
    CVE-2022-39037

    FLOWRING Agentflow BPM - Path Traversal

    Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

    Flowring Agentflow BPM