CVE-2014-2948

SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cret@cert.org

Published

2014-05-22

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Business Process Management Suite (Bizagi)

References

• http://www.kb.cert.org/vuls/id/112412