medium6.5
CVE-2014-2948
SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via …
Impact
SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bizagi | Business Process Management Suite | through 10.4 Versions 10.0, 10.0.1, 10.1, 10.2, 10.3 |