Advisories · Technology
Camunda 7.
Every CVE that names Camunda 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.0 Medium
Camunda Broken Access Control via Cockpit
- Camunda 7
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Camunda Expression Injection via orQueries RCE
- Camunda 7
- Command injection
- Code injection
- CVSS 8.6 High
Camunda Missing Authorization in Task Sub-Resources
- Camunda 7
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint
- Camunda 7
- Broken access control