Flowring records
9 published records for vendor flowring.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-288 Authentication Bypass Using an Alternate Path or Channel2
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-287 Improper Authentication1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-39036No exploit | FLOWRING Agentflow BPM - Arbitrary File Uploadflowring · agentflow · CWE-434 | Critical9.8 | — | 1.2% | Nov 10, 2022 |
39Monitor | CVE-2025-3709No exploit | Flowring Technology Agentflow - Account Lockout Bypassflowring · agentflow · CWE-307 | Critical9.8 | — | 0.6% | May 2, 2025 |
37Monitor | CVE-2026-2096No exploit | Flowring｜Agentflow - Missing Authenticatonflowring · agentflow · CWE-288 | Critical9.3 | — | 0.6% | Feb 10, 2026 |
37Monitor | CVE-2026-2095No exploit | Flowring｜Agentflow - Authentication Bypassflowring · agentflow · CWE-288 | Critical9.3 | — | 0.5% | Feb 10, 2026 |
35Monitor | CVE-2022-39038No exploit | FLOWRING Agentflow BPM - Broken Access Controlflowring · agentflow · CWE-287 | High8.8 | — | 0.9% | Nov 10, 2022 |
34Monitor | CVE-2026-2097No exploit | Flowring｜Agentflow - Arbitrary File Uploadflowring · agentflow · CWE-434 | High8.7 | — | 0.5% | Feb 10, 2026 |
30Monitor | CVE-2022-39037No exploit | FLOWRING Agentflow BPM - Path Traversalflowring · agentflow · CWE-22 | High7.5 | — | 1.3% | Nov 10, 2022 |
20Monitor | CVE-2026-2098No exploit | Flowring｜AgentFlow - Reflected Cross-site Scriptingflowring · agentflow · CWE-79 | Medium5.1 | — | 0.2% | Feb 10, 2026 |
20Monitor | CVE-2026-2099No exploit | Flowring｜AgentFlow - Stored Cross-Site Scriptingflowring · agentflow · CWE-79 | Medium5.1 | — | 0.2% | Feb 10, 2026 |
- CVE-2022-3903639Monitor
FLOWRING Agentflow BPM - Arbitrary File Upload
CriticalCVSS 9.8No exploitEPSS 1%flowring · agentflowNov 10, 2022
- CVE-2025-370939Monitor
Flowring Technology Agentflow - Account Lockout Bypass
CriticalCVSS 9.8No exploitEPSS 1%flowring · agentflowMay 2, 2025
- CVE-2026-209637Monitor
Flowring｜Agentflow - Missing Authenticaton
CriticalCVSS 9.3No exploitEPSS 1%flowring · agentflowFeb 10, 2026
- CVE-2026-209537Monitor
Flowring｜Agentflow - Authentication Bypass
CriticalCVSS 9.3No exploitEPSS 1%flowring · agentflowFeb 10, 2026
- CVE-2022-3903835Monitor
FLOWRING Agentflow BPM - Broken Access Control
HighCVSS 8.8No exploitEPSS 1%flowring · agentflowNov 10, 2022
- CVE-2026-209734Monitor
Flowring｜Agentflow - Arbitrary File Upload
HighCVSS 8.7No exploitEPSS 0%flowring · agentflowFeb 10, 2026
- CVE-2022-3903730Monitor
FLOWRING Agentflow BPM - Path Traversal
HighCVSS 7.5No exploitEPSS 1%flowring · agentflowNov 10, 2022
- CVE-2026-209820Monitor
Flowring｜AgentFlow - Reflected Cross-site Scripting
MediumCVSS 5.1No exploitEPSS 0%flowring · agentflowFeb 10, 2026
- CVE-2026-209920Monitor
Flowring｜AgentFlow - Stored Cross-Site Scripting
MediumCVSS 5.1No exploitEPSS 0%flowring · agentflowFeb 10, 2026