Skip to content
OpenAdvisories

Product · risesoft-y9

WorkFlow-Engine

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-110118

    WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints

    WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tasks via /vue/buttonOperation endpoints. Low-privileged attackers can supply a known taskId to the com…

    risesoft-y9 WorkFlow-Engine