CVE-2024-46480

7.2 highEPSS 0.5%

High (7.2) in venki supravizio bpm. EPSS 0.5% chance of exploitation in the next 30 days.

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2025-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

venki:supravizio_bpm

References

https://github.com/Lorenzo-de-Sa/Vulnerability-Research
https://github.com/Lorenzo-de-Sa/Vulnerability-Research/blob/main/CVE-2024-46480.md
https://www.venki.com.br/ferramenta-bpm/supravizio/

Check your stack JSON