Webcon - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-23.

Products

• Webcon Bps - 1 CVEs

Newest CVEs of Webcon

• CVE-2026-92419 - CVSS 5.3 (medium), 2026-09-23: WEBCON BPS is vulnerable to Insecure Direct Object Reference (IDOR) in the /api/vacations/{path} endpoint. The selectedPeople parameter in the Gantt vacation…
• CVE-2026-1630 - CVSS 5.1 (medium), 2026-05-14: WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" endpoint. An attacker can send a specially crafted URL that, when…