Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-58114 EUVD-2025-30282GHSA-x4vj-4rr5-pfhf

Potential XSS in Extension:CognitiveProcessDesigner

Published Sep 19, 2025 · Updated Sep 19, 2025 · Assigned by HW

Description

Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice (Extension:CognitiveProcessDesigner) allows Cross-Site Scripting (XSS).This issue affects BlueSpice: from 5 through 5.1.1.

Affected products

VendorProductAffectedFixed
Hallo Welt! BlueSpice 5 – ≤ 5.1.1 —

References