CVE-2014-2948

Bizagi Business Process Management Suite <= 10.4 - Authenticated SQL Injection via SOAP Request

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/112412

Scores

EPSS 0.0109
EPSS Percentile 61.9%

Details

CWE
CWE-89
Status published
Products (6)
bizagi/business_process_management_suite 10.0
bizagi/business_process_management_suite 10.0.1
bizagi/business_process_management_suite 10.1
bizagi/business_process_management_suite 10.2
bizagi/business_process_management_suite 10.3
bizagi/business_process_management_suite < 10.4
Published May 22, 2014
Tracked Since Feb 18, 2026