Security Advisory
CVE-2022-32456
9.8
CRITICAL
Vulnerability Description
Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service.
Published Date
July 20, 2022
Official Source
NIST NVD Advisory