Venki records
5 published records for vendor venki.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-203 Observable Discrepancy1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-522 Insufficiently Protected Credentials1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-15367Proof of concept | Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts.venki · supravizio bpm · CWE-307 | Critical9.8 | — | 2.0% | Jul 7, 2020 |
35Monitor | CVE-2024-46479No exploit | Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability.venki · supravizio bpm · CWE-434 | High8.8 | — | 0.8% | Jan 13, 2025 |
28Monitor | CVE-2024-46480No exploit | An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privvenki · supravizio bpm · CWE-522 | High7.2 | — | 0.5% | Jan 13, 2025 |
24Monitor | CVE-2024-46481No exploit | The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.venki · supravizio bpm · CWE-601 | Medium6.1 | — | 0.3% | Jan 13, 2025 |
21Monitor | CVE-2020-15392Proof of concept | A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2.venki · supravizio bpm · CWE-203 | Medium5.3 | — | 1.2% | Jul 7, 2020 |
- CVE-2020-1536740Plan
Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts.
CriticalCVSS 9.8Proof of conceptEPSS 2%venki · supravizio bpmJul 7, 2020
- CVE-2024-4647935Monitor
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability.
HighCVSS 8.8No exploitEPSS 1%venki · supravizio bpmJan 13, 2025
- CVE-2024-4648028Monitor
An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate priv
HighCVSS 7.2No exploitEPSS 0%venki · supravizio bpmJan 13, 2025
- CVE-2024-4648124Monitor
The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.
MediumCVSS 6.1No exploitEPSS 0%venki · supravizio bpmJan 13, 2025
- CVE-2020-1539221Monitor
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2.
MediumCVSS 5.3Proof of conceptEPSS 1%venki · supravizio bpmJul 7, 2020