VULNERABILITY INTELLIGENCE

CVE-2025-45854

CVSS score10 CRITICAL

EPSS probability3.21%

CISA KEVNot currently listed

Published2025-06-03

Last modified2026-06-17

Description

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.