CVE-2014-2948: Bizagi Business Process Management Suite

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request.

Affected products

• Bizagi Business Process Management Suite: up to and including 10.4; version 10.0 only; version 10.0.1 only; version 10.1 only; version 10.2 only; version 10.3 only

Published 2014-05-22. Last modified 2026-06-17.