Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
digiwin business process management |