CVE-2025-45854

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.

CVSS v3.1

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

3.01% chance of exploitation in the next 30 days, 86th percentile

Nuclei

critical

Published

2025-06-03

Updated

2025-08-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-45854.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2025-45846
• CVE-2025-45857
• CVE-2025-45835
• CVE-2025-45858
• CVE-2025-45814
• CVE-2025-45859