CVE-2014-2947: Bizagi Business Process Management Suite

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Login.aspx in Bizagi BPM Suite before 10.3 allows remote attackers to inject arbitrary web script or HTML via the txtUsername parameter.

Affected products

• Bizagi Business Process Management Suite: up to and including 10.2; version 10.0 only; version 10.0.1 only; version 10.1 only

Published 2014-05-22. Last modified 2026-06-17.