BP
Product
Business Process Server
3
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Business Process Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78674 New | 8.8 | Oct 28 | Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution Affected: through 3.6.0 |
| CVE-2017-14995 | 6.1 | Oct 4 | The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard… Affected: 3.6.0 |
| CVE-2017-14651 | 4.8 | Sep 21 | WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter Affected: 3.6.0 |
Showing 3