Vulnerabilities in ProcessMaker
4 resultsCVE-2016-9045HIGHA code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deEPSS 2.2%CVE-2016-9048HIGHMultiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests EPSS 0.8%CVE-2021-47978MEDIUMProcessMaker 3.5.4 Local File Inclusion via Path TraversalEPSS 0.8%CVE-2026-107803MEDIUMProcessMaker has SQL injection in the tasks endpoint through the order_by parameterEPSS 0.2%