CVE-2022-39036

概要

参考情報

• flowring.com/2022/09/19/%e7%94%a2%e5%93%81%e6%9b%b4%e6%96%b0agentflow-v4-0%e3%80%81v3-7%e5%a4%be%e6%aa%94%e5%8a%9f%e8%83%bd%e8%b3%87%e5%ae%89%e4%bf%ae%e6%ad%a3 · Vendor Advisory
• twcert.org.tw/tw/cp-132-6682-21207-1.html · Third Party Advisory

agentflow のその他の脆弱性

• CVE-2026-2099中 5.4AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persisten…
• CVE-2026-2098中 6.1AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arb…
• CVE-2025-3709緊急 9.8Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vu…
• CVE-2022-39038高 8.8Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of…
• CVE-2022-39037高 7.5Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability t…