Supravizio BPM vulnerabilities

2 known vulnerabilities in Supravizio BPM from Venki. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Supravizio BPM: Insufficiently Protected Credentials

  CVE-2024-46480Jan 13, 2025Venki

  An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.

• 8.8 High severity

  Supravizio BPM: Unrestricted Upload of File with Dangerous Type

  CVE-2024-46479Jan 13, 2025Venki

  Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution.