Venki Supravizio BPM

• CVE-2024-46480 High 8.4 An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system. 0.5%
• CVE-2024-46479 Critical 9.9 Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution. 0.8%
• CVE-2024-46481 High 7.2 The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS. 0.3%