High severity7.5NVD Advisory· Published Dec 29, 2025· Updated Jun 17, 2026
CVE-2025-15227
CVE-2025-15227
Description
BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- www.twcert.org.tw/en/cp-139-10605-426b6-2.htmlnvdThird Party Advisory
- www.twcert.org.tw/tw/cp-132-10604-c65aa-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.