CVE-2024-46480: Venki Supravizio Bpm

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.

Affected products

• Venki Supravizio Bpm: up to and including 18.0.1

Published 2025-01-13. Last modified 2026-06-17.