Skip to content

Vendor

SamrtSoft vulnerabilities

2 published CVES affecting SamrtSoft, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of SamrtSoft alerts

Products

Latest SamrtSoft CVEs

Newest publication first

  1. CVE-2023-37287 SmartBPM.NET - Use of Hard-Coded Credentials - 2

    Published
    CriticalCVSS 9.1

    SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes.

  2. CVE-2023-37286 SmartBPM.NET - Use of Hard-Coded Credentials - 1

    Published
    CriticalCVSS 9.8

    SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.