← Back

Bpmflowwebkit

bpmflowwebkit

Vendor: Welltend • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-15228
1Welltend
1Bpmflowwebkit
Jun 17, 2026
Dec 29, 2025
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on...Show more
BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.Show less
CVE-2025-15227
1Welltend
1Bpmflowwebkit
Jun 17, 2026
Dec 29, 2025
8.7 HIGH· v4
7.5 HIGH· v3
N/A· v2
BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.