CVE-2025-15227 in BPMFlowWebkit

요약

\~에 의해 MITRE • 2025. 12. 29.

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 책임이 있는: Twcert
• 예약하다: 2025. 12. 29.
• 공개: 2025. 12. 29.
• 모더레이션: 수락
• 항목: VDB-338622
• CPE: 준비됨
• CWE: CWE-36 (확인됨)
• CVSS: 7.5 (CNA)
• EPSS: 0.00095
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Police, Telecommunication, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-15227
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15227
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-15227/