Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Processmaker vulnerabilities

4 published CVEs name Processmaker among the affected products.

Published CVEs
4
Last 12 months
2
Critical
0
Known exploited
0

Critical 0High 2Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20182
  2. 20262

Newest CVEs

  • CVE-2026-107803

    ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter

    ProcessMaker · processmaker

    Medium6.5
  • CVE-2021-47978

    ProcessMaker 3.5.4 Local File Inclusion via Path Traversal

    Processmaker · ProcessMaker

    Medium6.9
  • CVE-2016-9045

    A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization…

    ProcessMaker · ProcessMaker Enterprise

    High8.8
  • CVE-2016-9048

    Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL…

    ProcessMaker · ProcessMaker Enterprise

    High7.4