https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-46481.htmlhttps://patchthecve.com/cve/CVE-2024-46481.htmlWed, 17 Jun 2026 07:55:26 +0000HIGH 7.2: The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.https://patchthecve.com/cve/CVE-2024-46480.htmlhttps://patchthecve.com/cve/CVE-2024-46480.htmlWed, 17 Jun 2026 07:55:26 +0000HIGH 8.4: An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.https://patchthecve.com/cve/CVE-2024-46479.htmlhttps://patchthecve.com/cve/CVE-2024-46479.htmlWed, 17 Jun 2026 07:55:26 +0000CRITICAL 9.9: Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution.