Vulnerabilities in Venki
3 resultsCVE-2024-46479CRITICALVenki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload aEPSS 0.8%CVE-2024-46480HIGHAn NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privEPSS 0.5%CVE-2024-46481HIGHThe login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.EPSS 0.3%