Activiti vulnerabilities
We track 1 vulnerability in Activiti products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Activiti vulnerabilities
- 7.1 High severity
Activiti: Improper Neutralization of Special Elements used in an Expression Language Statement
Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with #{ that are stored and later evaluated in the full Spring conte