Security Advisory

CVE-2024-5683

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-06-24 08:54:32
Last updated 2026-06-03 12:55:59
Assigner TR-CERT
CVSS score 9.8
State PUBLISHED

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Remote Code Inclusion. This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5.