Vulnerabilities > CVE-2022-32458 - XXE vulnerability in Digiwin Business Process Management 5.8.6.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |