CVE-2022-32458
20.07.2022, 02:15
Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files.Enginsight
Vendor | Product | Version |
---|---|---|
digiwin | business_process_management | 𝑥 < 5.8.8.1 |
𝑥
= Vulnerable software versions