Skip to content

Product

SamrtSoft SmartBPM.NET vulnerabilities

2 published CVES affecting SamrtSoft SmartBPM.NET, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest SamrtSoft SmartBPM.NET CVEs

Newest publication first

  1. CVE-2023-37287 SmartBPM.NET - Use of Hard-Coded Credentials - 2

    Published
    CriticalCVSS 9.1 EPSS 0.94%

    SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes.

  2. CVE-2023-37286 SmartBPM.NET - Use of Hard-Coded Credentials - 1

    Published
    CriticalCVSS 9.8 EPSS 1.0%

    SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.