SmartBPM.NET vulnerabilities

2 known vulnerabilities in SmartBPM.NET from SamrtSoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  SmartBPM.NET: Use of Hard-coded Credentials

  CVE-2023-37287Jul 10, 2023SamrtSoft

  SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes.

• 9.8 Critical severity

  SmartBPM.NET: Use of Hard-coded Credentials

  CVE-2023-37286Jul 10, 2023SamrtSoftEPSS 1.01%

  SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.