CVE-2023-37288: Smartsoft Smartbpm.net

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.

Affected products

• Smartsoft Smartbpm.net: version 6.70 only

Published 2023-07-10. Last modified 2026-06-17.