Vulnerability Details CVE-2014-2948
SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.7%
CVSS Severity
CVSS v2 Score 6.5
Products affected by CVE-2014-2948
-
cpe:2.3:a:bizagi:business_process_management_suite:10.0
-
cpe:2.3:a:bizagi:business_process_management_suite:10.0.1
-
cpe:2.3:a:bizagi:business_process_management_suite:10.1
-
cpe:2.3:a:bizagi:business_process_management_suite:10.2
-
cpe:2.3:a:bizagi:business_process_management_suite:10.3
-
cpe:2.3:a:bizagi:business_process_management_suite:10.4