← Database

CVE-2025-15227

HIGH CVSS: 7.5 Published: 2025-12-29 Modified: 2026-06-17

Description

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

Affected Platforms

Welltend Bpmflowwebkit

Weakness Type

CWE-36, CWE-22

References