All 3 CVE vulnerabilities found in AgileBPM, with AI-generated Chinese analysis, references, and POCs.
Vendor: Shenzhen Dashi Tongzhou Information Technology
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-5680 | Shenzhen Dashi Tongzhou Information Technology AgileBPM Groovy Script SysScriptController.java executeScript deserialization CWE-502 | 6.3 | Medium | 2025-06-05 |
| CVE-2025-5679 | Shenzhen Dashi Tongzhou Information Technology AgileBPM SysToolsController.java parseStrByFreeMarker deserialization CWE-502 | 6.3 | Medium | 2025-06-05 |
| CVE-2024-12235 | Shenzhen Dashi Tongzhou Information Technology AgileBPM AuthorizationTokenCheckFilter.java doFilter access control CWE-284 | 6.3 | Medium | 2024-12-05 |
All 3 known CVE vulnerabilities affecting AgileBPM with full Chinese analysis, references, and POCs where available.