CVE record · 1 source
CVE-2026-78674
CVSS 8.8The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted requests that can lead to the…
- Vendor
- WSO2
- Product
- Enterprise Integrator (BPS profile), Business Process Server
- CVSS v3.1
- 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-78
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted requests that can lead to the…
The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted requests that can lead to the execution of arbitrary commands on the server. An authenticated user can…