CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-32456
Critical (9.8) in digiwin business process management. EPSS 1.6% chance of exploitation in the next 30 days.
Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-11-01)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- digiwin:business_process_management