← Back

Business Process Management Suite

business_process_management_suite

Vendor: Bizagi • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Bizagi
1Business Process Management Suite
May 6, 2026
May 22, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.
1Bizagi
1Business Process Management Suite
May 6, 2026
May 22, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Login.aspx in Bizagi BPM Suite before 10.3 allows remote attackers to inject arbitrary web script or HTML via the txtUsername parameter.