CVE-2020-15367
CRITICALVenki Supravizio BPM 10.1.2 - Auth Bypass
Title source: llmDescription
Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.
Exploits (1)
Scores
CVSS v3
9.8
EPSS
0.0265
EPSS Percentile
85.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-307
Status
published
Products (1)
venki/supravizio_bpm
10.1.2
Published
Jul 07, 2020
Tracked Since
Feb 18, 2026