BPMFlowWebkit vulnerabilities

2 known vulnerabilities in BPMFlowWebkit from WELLTEND TECHNOLOGY. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  BPMFlowWebkit: Unrestricted Upload of File with Dangerous Type

  CVE-2025-15228Dec 29, 2025WELLTEND TECHNOLOGY

  BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

• 7.5 High severity

  BPMFlowWebkit: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-15227Dec 29, 2025WELLTEND TECHNOLOGY

  BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.