Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Agentflow CRITICAL 9.8
CVE-2026-2096

Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete dat…

Mitigation only
Fix from $2,300 2026-02-10
Agentflow HIGH 8.8
CVE-2026-2097

Agentflow developed by Flowring has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell b…

Mitigation only
Fix from $1,950 2026-02-10
Agentflow MEDIUM 6.1
CVE-2026-2098

AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary Ja…

Fix: 4.0.0.1878.877+
Fix from $1,600 2026-02-10
Agentflow MEDIUM 5.4
CVE-2026-2099

AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScr…

Fix: 4.0.0.1878.877+
Fix from $1,600 2026-02-10
Agentflow CRITICAL 9.8
CVE-2026-2095

Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functiona…

Mitigation only
Fix from $2,300 2026-02-10
Agentflow CRITICAL 9.8
CVE-2025-3709

Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerabili…

Mitigation only
Fix from $2,300 2025-05-02
Agentflow CRITICAL 9.8
CVE-2022-39036

The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit t…

Mitigation only
Fix from $2,300 2022-11-10
Agentflow HIGH 8.8
CVE-2022-39038

Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user…

Mitigation only
Fix from $1,950 2022-11-10
Agentflow HIGH 7.5
CVE-2022-39037

Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass …

Mitigation only
Fix from $1,950 2022-11-10