Unscored CVE-2014-2948 EUVD-2014-2970GHSA-r5gv-42g9-8hfg

SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitra…

Published May 22, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.

References

VU#112412 third-party-advisory