critical9.8
CVE-2020-15367
Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts.
Impact
Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Venki | Supravizio Bpm | Version 10.1.2 |