WELLTEND TECHNOLOGY vulnerabilities
We track 2 vulnerabilities in WELLTEND TECHNOLOGY products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 29, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest WELLTEND TECHNOLOGY vulnerabilities
- 9.8 Critical severity
BPMFlowWebkit: Unrestricted Upload of File with Dangerous Type
BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
- 7.5 High severity
BPMFlowWebkit: Improper Limitation of a Pathname to a Restricted Directory
BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.