Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2025-45854

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.

Description

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JEHc JEHC-BPM

Default version status: unknown

  • 2.0.1affected

References