VULNERABILITY INTELLIGENCE

CVE-2025-15228

CVSS score9.8 CRITICAL

EPSS probability0.59%

CISA KEVNot currently listed

Published2025-12-29

Last modified2026-10-07

Description

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.