VULNERABILITY INTELLIGENCE

CVE-2022-32456

CVSS score9.8 CRITICAL

EPSS probability1.64%

CISA KEVNot currently listed

Published2022-07-20

Last modified2026-06-17

Description

Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service.