WorkFlow-Engine vulnerabilities

CVEs whose affected-version data names the WorkFlow-Engine package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-102616High· 7.3PoC

today

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component OAuth2 Resource Filter. Performing a manipulation of the…

▾ Midnightrisesoft-y9 · WorkFlow-Enginevia NVD