Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.5%	CVE-2024-27609bonita · Cross-site Scripting Medium6.5EPSS 0.5%2024-03-31CVE Database V5CVE-2024-27609 Bonita before 2023.2-u2 allows stored XSS via a UI screen in the administration panel. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2024-03-31
Medium	6.1	EPSS 0.5%	CVE-2024-26542bonita · Cross-site Scripting Medium6.1EPSS 0.5%2024-02-27CVE Database V5CVE-2024-26542 Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14.and fixed in v.9.0.2, 8.0.3, 7.15.7, 7.14.8 allows attackers to execute arbitrary code via a crafted payload to the Groups Display name field. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2024-02-27

Page 1 of 1