Vulnerabilities in Nintex

3 results

CVE-2025-27925HIGHNintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.EPSS 0.4%CVE-2025-27926MEDIUMIn Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords thaEPSS 0.3%CVE-2025-27924MEDIUMNintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action.EPSS 0.2%