Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-5683

Remote Code Execution in Next4Biz's BPM

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Remote Code Inclusion. This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Next4Biz CRM & BPM Software Business Process Manangement (BPM)

Default version status: unaffected

  • 6.6.4.4 to < 6.6.4.5affected

References